Force SA device to use TLS to destination server?

[burnham_]

Hi All,

I'm seeing an SA-4500 use SSLv2 in a Client Hello to a destination though the IVE. Is it possible to force it to use TLS when it sets up an SSL connection to the destination?

The device is running 8.0R7.1, planning to upgrade to 8.0R11 soon.

Thanks much,

Mark

[Kita_]

What connection method are you seeing that using SSLv2? Rewrite, SAM, etc?

[Niol_]

The SA uses SSLv2 compatible client HELO to when it initiates an client SSL connnection to a backend server