I am encountering an issue where Microsoft Edge displays the error ERR_HTTP2_INADEQUATE_TRANSPORT_SECURITY and aborts the request. Disabling the Web Shield feature resolves the problem.
Upon further investigation using Edge’s Network Logging (edge://net-export), I observed that AVG Web Shield intercepts the TLS traffic and downgrades the negotiated cipher from the remote server to a weaker cipher. However, Web Shield does not downgrade the connection from HTTP/2 to HTTP/1.1. This appears to cause Edge to terminate the session with the above error.
In the AVG log file (AVGSvc.log), during SSL injection, the following entry is recorded:
CSslFilterContext.ClientHandshake.SSL_accept[connection:18259,version:TLSv1.2,cipher:AES128-GCM-SHA256,direction:outgoing]
Could you clarify why Web Shield is negotiating a weaker cipher during HTTP/2 sessions, and whether there is a configuration adjustment or update that can prevent this behavior?
Thank you for your assistance.