topic Re: This error means, you are in Network Security

ASA 5506x access https

abojorquez — Fri, 21 Feb 2020 14:13:20 GMT

I have a problema with the web access to my ASA5506x

ssl_error_no_cypher_overlap

I dont have web access

This error means, you are

B.kablawi90 — Fri, 11 Aug 2017 10:55:18 GMT

This error means, you are unable to communicate securely with device: no common encryption algorithm

You need to get the 3des license. Once you get the activation key configure it on your device.

"conft

activation-key

wr mem"

then add it yo your ASAM then add it yo your ASAM

"config -- device management -- licenseing -- activation key"

You should active the key then enable the http service and finally configure

"ssl encryption aes256-sha1 aes128-sha1 3des-sha1 des-sha1"

if you still unable to connect, clear all the connection to the IP of the device

"clear conn all x.x.x.x" and make "show asp table socket" to make sure.

Good luck

Thanks sir. It worked for me.

Dan Hilwory — Sun, 13 Aug 2017 15:24:08 GMT

Thanks sir. It worked for me.

Re: This error means, you are

E-MAK — Wed, 27 Sep 2017 14:51:41 GMT

Hello ,
I'm newbie with cisco firewalls , for now i'm buying a ASA 5506-x and i have the same Problem
" ssl error no cypher overlap " .
Please if you have any tutorial it will be helpful .

Thanks you so much

Re: This error means, you are

Marvin Rhoads — Thu, 28 Sep 2017 03:00:14 GMT

The procedure described by B.kablawi90 earlier in this thread is accurate. Have you tried that?

I would only add that you get the free 3DES-AES license from software.cisco.com under the "Traditional license" section.

A more detailed guide can be found below as well:

https://supportforums.cisco.com/t5/security-documents/asa-versions-image-names-and-licensing/ta-p/3126264#toc-hId--667791292

Re: This error means, you are

E-MAK — Thu, 28 Sep 2017 08:46:56 GMT

Hi ,

Thank you so much for your feed back,

no i don't try it , because i don't know how can i get the activation key / ASAM / active the key...
for your method , they show me The K9 , and i have ASA 5506-x K8 .
you can see it in attached piece .

Re: This error means, you are

Marvin Rhoads — Thu, 28 Sep 2017 10:31:30 GMT

ASA5500-ENCR-K9 is the correct license for you to request. Adding the "K9" license adds the strong encryption capability to the "K8" type of unit. That is the only difference between an ASA ordered with "K9" vs. "K8" in the part number.

Once you get that license and activate it using the instructions that Cisco sends you, you will be able to negotiate a common strong cipher between your client PC and your ASA.

Re: This error means, you are

E-MAK — Thu, 28 Sep 2017 11:17:21 GMT

Hello ,
It Works !
i creat a license in a Cisco.com/go/license and put the activation key in my device then Reload device, And it's Fine .
Thank You so Much Sir .

Re: This error means, you are

Marvin Rhoads — Thu, 28 Sep 2017 11:26:37 GMT

You're welcome.

Please mark the reply as helful since it solved your issue.