topic Re: ASA: Support for SHA in Network Security

ASA: Support for SHA

swscco001 — Tue, 13 Aug 2024 15:04:29 GMT

Hello everybody,

is there an information how long Cisco will still support the unsafe SHA
authentication at ASA firewall releaes?

Thanks for every hint!

Bye
R.

Re: ASA: Support for SHA

Rob Ingram — Tue, 13 Aug 2024 15:19:27 GMT

@swscco001 there is no notification of how long it will still be supported AFAIK, I expect Cisco will continue to support it whilst there are still customers requiring it. If you require further information I would recommend speaking to your Cisco Partner or Cisco account representative.

You should be able to disable SHA from where ever it is used in your configuration and use something more secure. SHA-2 and other next generation crypto has been available for a considerable period on ASA software, so there is no reason why you cannot use more secure crypto algorithms.

Re: ASA: Support for SHA

MHM Cisco World — Tue, 13 Aug 2024 16:22:36 GMT

All cisco platforms support weak and strong tls/ssl (include sha)

So best is disable manually disable weak cipher

https://integratingit.wordpress.com/2021/01/27/securing-asa-tls-ciphers/

MHM