How to use the 'sslscan' tool to determine which protocols and cipher suites are in use in an ePolicy Orchestrator environment
Last Modified: 2023-07-20 04:51:53 Etc/GMT
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
How to use the 'sslscan' tool to determine which protocols and cipher suites are in use in an ePolicy Orchestrator environment
Technical Articles ID:
KB96632
Last Modified: 2023-07-20 04:51:53 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10.x
Summary
When you troubleshoot TLS connection issues in an ePO environment, it's often necessary to determine which protocols and cipher suites are offered by a service or process. A common tool used for this is the open-source tool Installation: On the computer where you want to run the scan, install the tool as described below. Note that you don't have to run Windows:
Windows:
Here, target is the IP address, FQDN, or hostname of the system to be scanned, and port is the required port. If you want to scan port 443 on a system called
NOTE: The command records the output to a file called sslscan.txt in the current folder. The --no-color switch turns off the colors in the output, which makes the text file more readable.
Linux / MacOS:
Here, target is the IP address, FQDN, or hostname of the system to be scanned, and port is the required port. If you want to scan port 443 on a system called
NOTE: If prompted, type the user password to continue.
NOTE: The command records the output to a file called sslscan.txt in the current folder. The --no-color switch turns off the colors in the output, which makes the text file more readable.
Affected Products |
|