Does modifying the SSLcipherSuite in the MonitorController.properties file impact the Detection API Appliance

Products

• Data Loss Prevention API Detection for Developer Apps Virtual Appliance
• Data Loss Prevention API Detection Virtual Appliance
• Data Loss Prevention Network Prevent for Email Virtual Appliance
• Data Loss Prevention Network Prevent for Web Virtual Appliance
• Data Loss Prevention Enforce

Issue/Introduction

If we want to update the SSLcipherSuite in the MonitorController.properties file to a stronger cipher for the Enforce <--> Detection Server communication tunnel will this cause the communication from the Enforce <--> Appliance to fail?

Is there another parameter used for the Enforce <--> Detection API communication or it will be impacted?

Environment

Release : 15.8, 16.0

Resolution

The appliance has the cipher hardcoded, so it does not need to be explicitly specified in the property MonitorController.properties file on the Enforce server.  

You can modify the SSLcipherSuite in the MonitorController.properties file for communication with your detection servers without impacting the Appliance. 

Additional Information

Article ID: 162212 - SSL v3, TLS 1.0, and TLS 1.1 on Data Loss Prevention components