topic Re: ASA TLS Change Question in Network Security

ASA TLS Change Question

manofsteel03 — Thu, 12 May 2022 11:40:31 GMT

I have a question about disabling TLS 1.0 & 1.1 on ASA appliance. We have AnyConnect setup for our remote users and we also have a site-to-site vpn tunnel to a remote office. My question is by changing the settings identified in the below article, will this also affect our current site-to-site vpn tunnel connection? Or does the changing of these settings only affect the web url used for our AnyConnect users and ASDM?

https://freddejonge.nl/cisco-asa-disable-ssl-3-0-settings-and-change-it-to-tls-v1-2/

Thx for any assistance provided

Re: ASA TLS Change Question

Rob Ingram — Thu, 12 May 2022 11:47:04 GMT

@manofsteel03 changing the TLS settings will have no impact on the Site-to-Site VPN, as they use IKE + IPSec.

You are correct, changing the TLS settings would affect ASDM, Clientless VPN and AnyConnect VPN - if using SSL/TLS and not IPSec.

Re: ASA TLS Change Question

manofsteel03 — Thu, 12 May 2022 12:19:30 GMT

Thx for the feedback!