Last week we changed the access method to our PRTG installation from http to https. Now I have seen that with Firefox 26 or Chrome 31.0.1650.63 the used ciphersuite is TLS_RSA_WITH_AES_256_CBC_SHA. Is it possible to change these values that the PRTG Websserver will use also some ciphersuites with Diffie Helmann Ephemeral with provide perfect forward secrecy for the connections to the PRTG Webinterface. For example: - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 - TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA - TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 - TLS_DHE_RSA_WITH_AES_256_CBC_SHA - TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

Article Comments

Hi,
at the moment it is not possible to change the used cipher suites the PRTG web server is using. We are planning such functionality but no release date has been determined yet. Sorry.
Best regards


Dec, 2013 - Permalink

Hello,

I just wanted to ask you if this functionality has been implemented.

Best regards!


Jul, 2015 - Permalink

Please be aware that current versions of PRTG do use a much more secure cipher suite (including forward secrecy) now (compared to December 2013). It is set to use currently recommended secure ciphers. You can change this still, we do not recommend it though. For the details, please get in touch with us via email.


Jul, 2015 - Permalink