KB40706 - Disable 3DES cipher suites for Pulse Connect Secure or Pulse Policy Secure

This article describes instruction how to disable 3DES cipher suites on the Pulse Connect Secure (PCS) and Pulse Policy Secure (PPS) device.

To disable 3DES cipher suites, select one of the following methods:

Method 1: Pulse Connect Secure 8.2R3 / Pulse Policy Secure 5.3R3 and above

Starting with 8.2R3 & 5.3R3 releases and above, granular cipher suites options were added.  In these releases, administrator can manually select to enable / disable specific cipher suites and adjust the cipher suite ordering.  Due to this, the administrator can manually remove the 3DES cipher suites options.

1. Login to admin console
2. Navigate to System > Configuration > Security > SSL Options > Inbound SSL Options
3. Under Allowed Encryption Strength, select Show Selected Ciphers 
4. In the Selected Ciphers menu, remove all ciphers with 3DES
5. Click Save Changes

Note: In 8.2R8, all 3DES cipher suite options were removed from the Maximize Security (High Ciphers) option.
 

Method 2: Pulse Connect Secure 8.1RX / Pulse Policy Secure 5.1RX and below

​Please upgrade to PCS 8.1R11.1 or PPS 5.1R11.1 and set the Allow Encryption Strength to Maximize Security (High Ciphers) option.