Disable outbound SSLv2/SSLv3 connections
Use the glide.outbound.sslv3.disabled property to force the MID Server to use TLS when making outbound connections, such as REST and SOAP requests. Normally, outbound connections from an instance are forced to use TLS instead of SSL.
The glide.outbound.sslv3.disabled system property controls the desired transport encryption protocol. If glide.outbound.sslv3.disabled is not set to the recommended value of true, then outbound MID server connections such as REST and SOAP requests will use SSL as the transport protocol. SSL was proven to be insecure in 2014.
Ensure that the glide.outbound.sslv3.disabled system property exists in the System Properties [sys_properties] table and is set to the value true. If the property does not appear in the System Properties [sys_properties] table, add a new record.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.outbound.sslv3.disabled |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | Communications |
| Security risk | - Severity score: 6.5 - CVSS rating: Medium - Security risk details: SSLv3 has been proven insecure since 2014 due to vulnerabilities like POODLE, making it susceptible to man-in-the-middle attacks and data interception. Allowing SSLv3 undermines transport encryption and exposes sensitive data in transit, violating modern security standards. |
| Functional impact | None |
| Dependencies and prerequisites | None |
To learn more about adding or creating a system property, see Add a system property.
Parent Topic:Communications