client-lenc

Enable/disable OFTPD supporting FG-LENC devices , TLS 1.3 protocol and specific SSL CBC Suites protocol.

The client-lenc command replaces the device-lenc command in previous versions of FortiSandbox.

Sytntax

client-lenc [-h|-l|-e|-d|-i|-g|-f|-j|-k]

Option	Description
-h	Help information.
-e	Enable support for Low-Encryption (LENC) devices.
-d	Disable support for Low-Encryption (LENC) devices. This is the default value.
-l	Display current support status for Low-Encryption (LENC) devices.
-i	Display current support status for TLS 1.3 and CBC ciphers.
-g	Enable support for TLS 1.3.
-f	Disable support for TLS 1.3, max TLS version will be 1.2. This is the default value.
-j	Disable CBC cipher suite. See CBC ciphers..
-k	Enable CBC cipher suite.This is the default value.

CBC ciphers

The following CBC cipher suites are disabled when option -j is applied:

• DHE-RSA-AES128-SHA
• DHE-RSA-AES256-SHA
• DHE-RSA-CAMELLIA128-SHA
• DHE-RSA-CAMELLIA256-SHA
• DHE-RSA-SEED-SHA
• ECDHE-RSA-AES128-SHA
• ECDHE-RSA-AES256-SHA
• AES128-SHA
• AES256-SHA
• CAMELLIA128-SHA
• CAMELLIA256-SHA
• SEED-SHA
• DHE-RSA-AES128-SHA256
• DHE-RSA-AES256-SHA256
• DHE-RSA-CAMELLIA128-SHA256
• DHE-RSA-CAMELLIA256-SHA256
• ECDHE-RSA-AES128-SHA256
• ECDHE-RSA-AES256-SHA384
• RSA-AES128-SHA256
• RSA-AES256-SHA256
• RSA-CAMELLIA128-SHA256
• RSA-CAMELLIA256-SHA256
• AES128-SHA256
• AES256-SHA256
• CAMELLIA128-SHA256
• CAMELLIA256-SHA256
• ECDHE-RSA-CAMELLIA128-SHA256
• ECDHE-RSA-CAMELLIA256-SHA384