Set the new UI to enforce HSTS and allow to change cipher
These are security relate in reference to the New UI, and since PRTG contains authentication and secure data, it should be secured as any Enterprise software should be.
- In the 25.3.110.x release the New UI enables an application server which by default does not enforce HSTS by default.
https://www.tenable.com/plugins/nessus/142960
https://datatracker.ietf.org/doc/html/rfc6797
- When scanning the New UI with Tenable/Nessus found that it is using a weak cipher and as the support case 2787397 notes, there was not a way to change the cipher to a TLS2/3 acceptable suite.
1
vote
Billy Cole
shared this idea
