> Source: [sk111937](https://support.checkpoint.com/results/sk/sk111937)

# sk111937 - "Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings" error in Internet Explorer browser for HTTPS web site

| Property | Value |
|----------|-------|
| Solution ID | sk111937 |
| Date Created | 2016-06-13 |
| Last Modified | 2017-03-06 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * The following error appears in Internet Explorer browser when trying to connect to an HTTPS web site through Security Gateway:

  `Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting to`  
  `
  https://XXX again. If this error persists, contact your site administrator.`
  Example:  
  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk111937/IE_Error.jpg)
* All these TLS versions are already enabled in Internet Explorer browser (*Tools* menu - *Internet Options* - *Advanced* tab).

  Example:  
  ![](https://sc1.checkpoint.com/sc/SolutionsStatics/sk111937/IE_Advanced_Settings.jpg)
* FireWall kernel debug on Security Gateway ('`fw ctl debug -m fw + drop`') shows that the HTTPS response from the web site is dropped:

  `;fw_log_drop_ex: Packet proto=6 `*HTTPS_SITE_ADDRESS:443*` -> `*CLIENT_ADDRESS:Dest_Port*` dropped by fwpslglue_chain Reason: PSL Reject: ASPII_MT;`
* Application Control kernel debug on Security Gateway ('`fw ctl debug -m APPI + connection`') shows that the HTTPS response from the web site is blocked:

  `[SID: 00000] {connection} appi_transaction_conn_process_rb_match_result: MATCH on rule ... (application: ..., action: BLOCK);`

## Cause

Traffic is being dropped by Application Control policy.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content