TLS versions supported by GCE and HTML Viewer?

Carmen Durham

July 19, 2018 19:53

Hello,

 

Our network admin wants to disable some TLS versions and cipher suites on some servers with Geocortex Essentials loaded and HTML Viewers published.  Will this cause problems?  Is there a list of TLS versions supported by versions of GCE and associated viewers?

 

Or is the above not even applicable to GCE or the Viewers?   I already have the list for ArcGIS Server.

 

Thanks,

 

Carmen

0

• 

  Permanently deleted user

  July 19, 2018 20:07

  Hi Carmen,

   

  You will likely run into issues.  Essentials is a dotnet 4 application and will not support TLS 1.2 without a change.  Please see this article for the workaround (registry changes) -

   

  https://support.geocortex.com/essentialsGSCkba?sub-nav=kba&main-nav=essentials&#!/feedtype=SINGLE_ARTICLE_DETAIL&criteria=BESTANSWERS&id=kA360000000L14bCAC

   

  Regards,

   

  Wayne Richard

   

  Latitude Geographics Group Ltd.

   

  Head Office: 300 – 1117 Wharf Street  Victoria, BC Canada V8W 1T7

   

  Tel: (250) 381-8130 | Fax: (250) 381-8132 | wrichard@latitudegeo.com 

   

  Developers of Geocortex web-based mapping software | www.geocortex.com

   

  An Esri Platinum Business Partner

   

   

  0
• 

  Scott Daniel

  July 19, 2018 20:17

  I recently disabled TLS 1.0 per our IT's recommendation thinking it was causing application errors. Doing so made Essentials think that MapServices hosted by others were off-line. I re-enabled it and all is good. I would leave it alone for now...

  0
• 

  Permanently deleted user

  July 19, 2018 20:26

  If you are concerned with security vulnerabilities, I would go ahead with the change and add the registry settings, it should work as normal once the registry settings are added.  TLS 1.0 is not secure and is considered EOL.

   

  Regards,

   

  Wayne

  0
• 

  Carmen Durham

  July 20, 2018 17:11

  Thank you Wayne for the information. Yes, IT is tightening the security throughout our system.  I want to let IT know where we will have problems and set a schedule for changing the settings so GIS will be ready to deal with the ripple effects (vs. the settings get changed when all of GIS is at a conference or on vacation!)

  0
• 

  John Nerge

  July 27, 2018 15:13

  No idea if this is a credible tool to use or not, but I just ran it against our geocortex web server URL, and the report was useful in helping me (a non-web server expert) understand how it's using SSL/TLS.

   

  https://globalsign.ssllabs.com/analyze.html

  0

Please sign in to leave a comment.