SSL Self Signed Certificate Findings on Nessus Scans on Cisco 3750 - 24PS-E

gbenoit83 — Fri, 21 Feb 2020 15:33:06 GMT

When our IA team performed security scans, an SSL Self-Signed medium finding was discovered along with other SSL findings. How do I resolve this issue? We do not use a CA, just a generated cipher and cert by the switch itself along with all the other switches on our network. How do i go in too check the SSLs, change, delete or update? The switch is currently running C3750-IPSERVICESk9-M 12.2(55)SE11 IOS. Would an IOS upgrade resolve any of the issues below? I cannot find any information on the possibility of it solving any of these issues.

Below are the other findings:

SSL Certificate cannot be trusted

SSL Version 2 and 3 Protocol Deletion

SSL Weak Cipher Suites Supported

SSL Certificate sighned using weak hashing algorithm

SSL Medium Strength cipher suites supported

SSL Self signed certificate

SSLv3 Padding Oracle on Downgraded Legacy Encryption Vulnerability (POODLE)

NTP Mode 6 Scanner

Re: SSL Self Signed Certificate Findings on Nessus Scans on Cisco 3750 - 24PS-E

mburnno — Thu, 22 Mar 2018 19:14:32 GMT

Greg,

If you use the commands below this should clear up your findings.

no ip http secure-server

no ip http server

topic SSL Self Signed Certificate Findings on Nessus Scans on Cisco 3750 - 24PS-E in Network Security

SSL Self Signed Certificate Findings on Nessus Scans on Cisco 3750 - 24PS-E

Re: SSL Self Signed Certificate Findings on Nessus Scans on Cisco 3750 - 24PS-E