topic Re: Cisco Firepower TLS decryption cipher list in Network Security

Cisco Firepower TLS decryption cipher list

tunolno1 — Fri, 19 Jul 2024 09:16:16 GMT

Any active Firepower users - can you point me towards a list of cipher supprted for SSL decryption?

I can't find anything in the docs except stupid note that you have to ask TAC for it...

Re: Cisco Firepower TLS decryption cipher list

Mark Elsen — Fri, 19 Jul 2024 11:00:43 GMT

% nmap -sV --script ssl-enum-ciphers -p 443 your-firepower-hostname
The above example tests on port 443 , usually uses for https , if there is another port using ssl and you
want to test , then change the port number accordingly

Re: Cisco Firepower TLS decryption cipher list

ccieexpert — Sat, 20 Jul 2024 02:30:20 GMT

nmap to the firepower ip will not help determine decryption ciphers..

NMAP through the box to a few major websites will reveal the ciphers that it is supporting..

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/decryption-rules.html#id_80972

*** Please mark as helpful if this was useful ***