topic Cisco ISE 2.6 "set ECDHE and/or DHE cipher suites as preferred" . in Network Access Control

Cisco ISE 2.6 "set ECDHE and/or DHE cipher suites as preferred" .

Ricardo Matias Aires — Tue, 27 Jul 2021 20:31:06 GMT

Hi,

Its possible, set ECDHE cipher suites as preferred, in SSL server?

If yes, how?

ISE 2.6

Thanks!

Re: Cisco ISE 2.6 "set ECDHE and/or DHE cipher suites as preferred" .

inderdeeps — Tue, 27 Jul 2021 20:37:51 GMT

@Ricardo Matias Aires : Check the below link may help you

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200169-Configure-ESA-to-prefer-Perfect-Forward.html

Re: Cisco ISE 2.6 "set ECDHE and/or DHE cipher suites as preferred" .

Greg Gibbs — Tue, 27 Jul 2021 23:20:13 GMT

There is no direct method to set the preferred cipher as there is no direct access to the underlying OS. There are some mechanisms to remove support for some insecure ciphers, so you might look at these options.

Enable FIPS Mode
Remove support for specific ciphers in Administration > System > Settings > Security Settings