topic Re: Anyconnect - setup remove old protocols in Network Security

Anyconnect - setup remove old protocols

old roo — Tue, 07 Jun 2022 14:10:41 GMT

Hi all

Setting up Anyconnect from scratch on the firepowers. Using the FMC.

How do i remove the old protocols like TLS1.0 and TLS 1.1 from being used. I cant see that in the anyconnect setup ?

Is this done at the interface level ?

Any help would be great.

MHM Cisco World — Tue, 07 Jun 2022 14:10:07 GMT

Rob Ingram — Tue, 07 Jun 2022 14:16:02 GMT

@old roo what version of FMC and FTD are you using? With 6.6 you can explictly enable DTLS 1.2, which gives you better performance.

Example guide here to enable DTLS 1.2 and specify ciphers under Platform Settings:-

old roo — Tue, 07 Jun 2022 14:23:31 GMT

Forgot to add that am using 6.6.5.2

Rob Ingram — Tue, 07 Jun 2022 14:31:30 GMT

@old roo that's fine, the configuration example provided will work on 6.6.5.2.

old roo — Tue, 07 Jun 2022 14:42:39 GMT

Does changing the SSL settings in article affect any other services on the platform ? or just Anyconnect ?

Rob Ingram — Tue, 07 Jun 2022 14:49:05 GMT

@old roo no just AnyConnect Remote Access VPN.