https://community.cisco.com/t5/network-security/how-to-disable-ssl-static-key-ciphers-on-cisco-asa/m-p/4188825#M1076128 <P>That worked.</P><P>&nbsp;</P><P>Thank you.</P> Wed, 25 Nov 2020 17:01:43 GMT FMS101 2020-11-25T17:01:43Z https://community.cisco.com/t5/network-security/how-to-disable-ssl-static-key-ciphers-on-cisco-asa/m-p/4188716#M1076120 <P>I'm running version 9.12(4)7 on ASA 5525.&nbsp; A scan of the firewall flagged&nbsp; the following&nbsp; vulnerability.</P><P>&nbsp;</P><P>TLS/SSL Server Supports The Use of Static Key Ciphers</P><P>&nbsp;</P><P>Any idea how this can be disabled?</P><P>&nbsp;</P><P>Thanks.</P> Wed, 25 Nov 2020 14:19:09 GMT https://community.cisco.com/t5/network-security/how-to-disable-ssl-static-key-ciphers-on-cisco-asa/m-p/4188716#M1076120 FMS101 2020-11-25T14:19:09Z https://community.cisco.com/t5/network-security/how-to-disable-ssl-static-key-ciphers-on-cisco-asa/m-p/4188788#M1076125 <P>Have you tried disabling all non-DHE ciphers?</P> <P>See the posting by&nbsp;<a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/325766">@Karsten Iwen</a> here:</P> <P><A href="https://community.cisco.com/t5/vpn/anyconnect-perfect-forward-secrecy/td-p/3324415" target="_blank">https://community.cisco.com/t5/vpn/anyconnect-perfect-forward-secrecy/td-p/3324415</A></P> Wed, 25 Nov 2020 16:06:53 GMT https://community.cisco.com/t5/network-security/how-to-disable-ssl-static-key-ciphers-on-cisco-asa/m-p/4188788#M1076125 Marvin Rhoads 2020-11-25T16:06:53Z https://community.cisco.com/t5/network-security/how-to-disable-ssl-static-key-ciphers-on-cisco-asa/m-p/4188825#M1076128 <P>That worked.</P><P>&nbsp;</P><P>Thank you.</P> Wed, 25 Nov 2020 17:01:43 GMT https://community.cisco.com/t5/network-security/how-to-disable-ssl-static-key-ciphers-on-cisco-asa/m-p/4188825#M1076128 FMS101 2020-11-25T17:01:43Z