Chapter 10 Install and System Administration for FortiOS 5.0 : Central management : Adding a FortiGate to FortiManager : FortiGate configuration : Configuring an SSL connection
  
Configuring an SSL connection
An SSL connection can be configured between the two devices and an encryption level selected. Use the following CLI commands in the FortiGate CLI to configure the connection:
config system central-management
set status enable
set enc-algorithm {default* | high | low}
end
The default encryption automatically sets high and medium encryption algorithms. Algorithms used for high, medium, and low follows openssl definitions:
High - Key lengths larger than 128 bits, and some cipher suites with 128-bit keys.
Algorithms are: DHE-RSA-AES256-SHA:AES256-SHA: EDH-RSA-DES-CBC3-SHA: DES-CBC3-SHA:DES-CBC3-MD5:DHE-RSA-AES128-SHA:AES128-SHA
Medium - Key strengths of 128 bit encryption.
Algorithms are: RC4-SHA:RC4-MD5:RC4-MD
Low - Key strengths of 64 or 56 bit encryption algorithms but excluding export cipher suites
Algorithms are: EDH-RSA-DES-CDBC-SHA; DES-CBC-SHA; DES-CBC-MD5.
See Also
FortiGate configuration
FortiManager configuration