As of June 20, 2018, Sumo Logic will no longer support Transport Layer Security (TLS) versions 1.0 and 1.1 in its public endpoints due to security vulnerabilities. As you already know, ensuring the security of your environment is a top priority of ours, so we need to align with industry standard best practices. Therefore, Sumo Logic will be making a change to its Elastic Load Balancers to only support TLS version 1.2.
If you take no action before Sumo Logic moves exclusively to TLS 1.2, you may lose the ability to use the Sumo Logic service. You will also lose the option to upgrade to a supported version using the UI or the API after June 20th. Inbound and outbound connections, to and from your Sumo Logic org will fail if they rely on TLS 1.0 or TLS 1.1. While we have identified your active collectors which need to be upgraded, please note that this change will impact ALL connections to our public endpoints, so please ensure that your API clients default to using TLS 1.2 as well.
To avoid adverse impact, please upgrade ALL older Sumo Logic collector agents and double check your API clients for TLS 1.2 support before June 20th. The minimum collector version we will be supporting going forward is 19.155. If you have baked the collector into a machine image, you will need to update the image using a newer collector version.
There are several ways you can perform this upgrade:
- Upgrade Using the Web Application.
- Upgrade Using the API.
- If you have a large number of Collectors to upgrade, we have developed a Collector Management API Client to help you automate this process.
- Upgrade by downloading and running the most recent Collector installer from command line. This command-line method will be the only option to upgrade collectors after May 31st.