Skip to main content

Validate TLS SSL Hardening

Overview​

This script is designed to validate if SSL 3.0, TLS 1.0, and TLS 1.1 are disabled at both the server and client levels. Additionally, it checks if below cipher suites are disabled:

  • TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
  • TLS_RSA_WITH_AES_256_CBC_SHA256
  • TLS_RSA_WITH_AES_256_GCM_SHA384
  • TLS_RSA_WITH_AES_128_CBC_SHA256
  • TLS_RSA_WITH_AES_128_GCM_SHA256
  • TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

Sample Run​

Play Button > Run Automation > Script

SampleRun1

Automation Setup/Import​

Automation Configuration

Output​

  • Activity Details

Changelog​

2026-04-10​

  • Initial version of the document.