DNAC TLS version

[OJ_Magellan]

Hi,

we want to change the minimum TLS version on the DNAC from 1.1 to 1.2,  which impact would this change would have on the network? what do need to be aware of before changing the TLS version?

Regards,

OJ

[balaji.bandi]

Look at the below doccument :

Cisco DNA Center Hardening Steps

Upgrade the minimum TLS version. Cisco DNA Center comes with TLSv1.1 and TLSv1.2 enabled by default, and we recommend that you set the minimum TLS version to 1.2 if possible in your network environment. For more information, see Change the Minimum TLS Version and Enable RC4-SHA (Not Secure).

Change the Minimum TLS Version and Enable RC4-SHA (Not Secure)

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/hardening_guide/b_dnac_security_best_practices_guide.html#task_vq4_yyk_ybb

[OJ_Magellan]

Hi,

I am aware of that document, but I was wondering what would happen to the DNAC/Network if simply change the TLS version? 

Regards,

OJ

[balaji.bandi · Accepted solution]

DNAC is just orchastration tool, as per i know you do not see any effect on any Live environment.