Few questions on community version of Search Guard limitations

Search Guard
1

Hi,

I’m looking into using Search Guard community version, can someone help me understand it better by answering the following questions?

  1. Does SG Community Version support OpenSSL/encryption between ELK servers and the client servers outside ELK cluster? For example, communication between Logstash server and remote server where Beats is installed.

  2. Does SG Community Version support Third Party TLS certificates?

Thanks.

2
  1. yes
  2. yes

Here you can find a comparsion between the different editions: Search Guard Security | Securing your Elasticsearch cluster with Search Guard

3

Hi @hsaly , thank you for your response. I have an additional question. I can’t seem to find in the documentation where it clearly states the version of TLS that are supported. Is TLSv1.3 supported?

4

TLS 1.3 is supported since SG 23.2 (but only when used together with >= Java 11).
We also support TLSv1.2 and TLSv1.1

5

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.