Update: Box blocking traffic from outdated Box desktop clients starting May 13, 2019
Posted: 2018-06-18 17:07:02 Expiration: 2019-08-25 17:07:02
Update 04/19/2019
Effective May 13, 2019, Box will block traffic coming from outdated versions of Box desktop clients that still uses TLS 1.0, such as Box Drive, Box Sync, Box Tools, and Box for Office.
Before May 13, individuals using an outdated version must update their desktop client to continue to sync their files/folders to their UW-Madison Box account. Individuals who are still using an outdated version and will be impacted will receive a targeted communication.
If no action is taken by May 13, Box will stop outdated desktop clients from syncing files/folders to the UW-Madison Box service.
Note: This change does not mean affected individuals will lose access to their UW-Madison Box account. This change is preventing insecure and non-compliant desktop clients from syncing files/folders from a computer to the UW-Madison Box service. The UW-Madison Box service can still be accessed using a browser that is updated to the latest version.
Learn more about the importance of updating outdated Box products and services.If you have any questions or need further support, please contact the DoIT Help Desk.
***************************************************************************************************************************************Update 09/20/18
Individuals who have recently accessed Box with an application that uses TLS 1.0 will receive a notification from the vendor directing the user to update their application before November 12, 2018.
***************************************************************************************************************************************Update
Box has delayed blocking non-compliant versions of browsers, 3rd party applications, and Box applications that still use TLS 1.0 from connecting to the Box web application.
Affected individuals who continue to use a non-compliant application will still be able to connect to the Box web application. However, these products and services will not be supported as of June 25, 2018. Applications that are still using TLS 1.0 will be blocked from accessing Box starting November 12, 2018.
View detailed information concerning this change.
***************************************************************************************************************************************Original Message
On June 25, 2018, Box will start blocking access from client applications that use TLS 1.0. Affected individuals experiencing issues connecting to the Box web application should update their client application. Individuals who need further assistance should contact the DoIT Help Desk.
The original announcement of this change only affected older client versions and impacted a very small number of users.
Those users were contacted directly by the UW Madison Box Service Team. Box has since identified issues with the current versions of Box for Office and Box Drive for Windows that will require all users of those applications to upgrade their clients.
On June 18, Box will release an update to Box for Office. Users will need to upgrade in order to continue using Box for Office after TLS 1.0 is deprecated on June 25th.
Sometime during the week of June 18 Box will release an updated version of Box Drive for Windows that will address auto-update capabilities that are not TLS 1.1+ compliant.
If you have customized the deployment of these applications on your user’s desktop you will need to make sure they are updated appropriately. Most users should receive these updates to the application automatically.
If you have any questions or concerns, please contact the DoIT Help Desk.
-- Box: Christina Gomez