> Source: [sk168472](https://support.checkpoint.com/results/sk/sk168472)

# sk168472 - Vulnerability scan on the Security Management server shows that the port 8211 is using TLSv1.0

| Property | Value |
|----------|-------|
| Solution ID | sk168472 |
| Date Created | 2020-08-11 |
| Last Modified | 2022-04-13 |
| Technical Level | General |
| OS | Gaia |

## Symptoms

- Vulnerability scan on the Security Management server shows that the port 8211 is using TLSv1.0. This port is used for the internal communication between log servers for RFL queries.

## Solution

This problem was fixed. The fix is included starting from:

* [Check Point R81](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk166715)
* [Jumbo Hotfix Accumulator for R80.40](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165456) starting from Take 92
* [Jumbo Hotfix Accumulator for R80.30](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk153152) starting from Take 228
* [Jumbo Hotfix Accumulator for R80.20](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk137592) starting from Take 190
* [Jumbo Hotfix Accumulator for R80.10](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116380) starting from Take 290

**Procedure for versions R80.40 and lower with the required Jumbo Hotfix Accumulator:**

**Note** - You must do this procedure on each server in your environment.

1. Install the Jumbo Hotfix Accumulator for your version that contains the fix.

2. Connect to the command line on the Management Server / Log Server / SmartEvent Server.

3. Log in to the Expert mode.

4. Configure the TLS version 1.2 in Check Point Registry.

   Run:

   `$CPDIR/bin/cpprod_util CPPROD_SetValue "Reporting Module/6.0" MinimumSolrTlsVersion 1 "1.2" 1`

   The output of this command must be just the digit "0" (zero).
5. Stop the Check Point services:

   * On a Security Management Server / Log Server / SmartEvent Server, run:

     `evstop`
   * On a Multi-Domain Security Management Server / Multi-Domain Log Server, run:

     `mdsstop`
6. Start the Check Point services:

   * On a Security Management Server / Log Server / SmartEvent Server, run:

     `evstart`
   * On a Multi-Domain Security Management Server / Multi-Domain Log Server, run:

     `mdsstart`

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content