Ruckus ZD3000 - TLS 1.0/1.1

[MYK-IT]

We have a Ruckus ZD3000 that is using 9.8.3.0 build 58 (we cannot upgrade further due to having AP7962, and other Access Points that are not supported beyond this) but just wondered if there were any workarounds / solutions?

 

TLS1.0/1.1

When accessing web-gui, we get the "your connection is not fully secure err_ssl obsolete version" via Chrome. We can disable that, but wondered if there was a way to disable TLS1.0/1.1 (and enable TLS1.2) for this firmware version? I found some notes online, relating to connecting via SSH and changing some settings etc. but I don't think it applied to this model / firmware.

 

AAA Server - Active Directory

Only supports 389, not 636 - as no TLS option (same for LDAP, no LDAPS even if that was an alternative).

 

Longer-term, I'll have to research into upgrade options but seems a shame if the ZD3000 has to be replaced too (as I also have a spare one too) and just upgrade the Access Points etc.

[TechMonkey]

You'll need to speak to a Ruckus specialist but my understanding is that ZD are EoL. If you got rid of your old APs you can certainly upgrade the ZD but you will still get to a point where you can't use any of the newer APs. So effectively there is no 'supported' fix for this and if you carry out an unsupported fix you will run into problems if you need support.

 

I'll PM you as I may have a stop gap solution.

[Net-Ctrl]

Hello - I have just spoken to some of our SE's and they're not aware of any workarounds for the above - however have said if you want to have a chat around the solution, and see if there are some other considerations/options available to let me know.