topic Re: SSL cipher suite in ASA : Server Vs Client in Network Security

SSL cipher suite in ASA : Server Vs Client

PacketSpartan — Wed, 08 Sep 2021 08:47:55 GMT

We need to change TLS 1.0 to TLS 1.2, We will like to do this for our external and eventually our internal (client)

If we change the Server from 1.0 to 1.2, will this break any services that are facing the WEB that only accepts TLS 1.0. We have Citrix storefront servers on TLS 1.0 I believe it will as the FW will no longer be allowing TLS 1.0 connections

Can someone clear the confusion?

Re: SSL cipher suite in ASA : Server Vs Client

Rob Ingram — Wed, 08 Sep 2021 09:02:36 GMT

@PacketSpartan

The server version and client version commands you refer to are for traffic "to" the ASA itself, such as management via ASDM or SSL-VPN, not "through" the ASA such as any website hosted inside or outside.

Re: SSL cipher suite in ASA : Server Vs Client

Marius Gunnerud — Wed, 08 Sep 2021 11:02:03 GMT

The SSL configuration is between client and server and the ASA will not bother with this so long as the port that is being secured by SSL is allowed there the ASA.

Re: SSL cipher suite in ASA : Server Vs Client

PacketSpartan — Fri, 10 Sep 2021 08:59:36 GMT

Cheers Rob,

Appreciate the prompt responce