Hello - we are using Secure Mail Gateway, and the configuration options allow for basic requiring of TLS, etc., but it makes no mention on what TLS protocols and ciphers are actually available.  We are getting this in the logs, but only from a single connection, and I can't get any visibility past the basic stuff on the webpage:

Oct  9 09:40:37 kemg postfix/smtpd[57824]: connect from sil-mta-dmz-02-pub.dol.gov[152.180.11.245]
Oct  9 09:40:37 kemg postfix/smtpd[57824]: setting up TLS connection from sil-mta-dmz-02-pub.dol.gov[152.180.11.245]
Oct  9 09:40:37 kemg postfix/smtpd[57824]: SSL_accept error from sil-mta-dmz-02-pub.dol.gov[152.180.11.245]: -1
Oct  9 09:40:37 kemg postfix/smtpd[57824]: warning: TLS library problem: 57824:error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher:s3_srvr.c:1407:
Oct  9 09:40:37 kemg postfix/smtpd[57824]: lost connection after STARTTLS from sil-mta-dmz-02-pub.dol.gov[152.180.11.245]
Oct  9 09:40:37 kemg postfix/smtpd[57824]: disconnect from sil-mta-dmz-02-pub.dol.gov[152.180.11.245]
 

How can I get more information into this?  Clearly a cipher mismatch, but how can I tell what/why?  The logs in web page are of no use with respect to this.

Thanks,

John

 

Hello John,

please refer to the following link to get more detailed information 

https://support.kaspersky.com/ksmg/2.0.1/diagnostics

Here you will see a link to enable traces and also a link to create the diagnostics from KSMG where you can see more logs and details for KSMG

In addition to get more information on TLS for this Product refer to the online help here:

https://support.kaspersky.com/KSMG/2.0.1/en-US/95396.htm

I hope I have been able to help you and remain

with Best Regards

 

Thanks for the links, but the TLS link does NOT specify anything specific about the TLS protocols and ciphers that it supports.  That is what I am looking for specifically.

 

Am 10.10.2023 um 17:08 schrieb John Everette:

Thanks for the links, but the TLS link does NOT specify anything specific about the TLS protocols and ciphers that it supports.  That is what I am looking for specifically.

 

Hello John,

please open a Supportticket here: https://CompanyAccount.kaspersky.com