ExtraHop named a Leader in the 2025 Forrester Wave™: Network Analysis And Visibility Solutions

Arrow pointing right
  • Platformchevron right
  • Solutionschevron right
  • Modern NDRchevron right
  • Resourceschevron right
  • Companychevron right

DETECTION OVERVIEW

Deprecated SSL/TLS Versions

Risk Factors

SSL 2.0 was deprecated in March 2011 because it was vulnerable to attacks and relied on the outdated MD5 message digest algorithm. SSL 3.0 was deprecated in June 2015 because it was vulnerable to attacks and provided support for RC4, a weak cipher algorithm. TLS 1.0 was deprecated in March 2021 because it was vulnerable to attacks and lacked support for stronger cipher algorithms.

Kill Chain

Hardening

Risk Score

61

Next in Hardening: Expired TLS Server Certificate

Attack Background

Mitigation Options

Disable support for SSL 2.0, SSL 3.0, and TLS 1.0 on your web server

What else can RevealX do for you?