Cisco ISE 2.6 "set ECDHE and/or DHE cipher suites as preferred" .

[Ricardo Matias Aires]

Hi,

Its possible, set ECDHE cipher suites as preferred, in SSL server?

If yes, how?

ISE 2.6

Thanks!

[inderdeeps]

@Ricardo Matias Aires : Check the below link may help you 

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200169-Configure-ESA-to-prefer-Perfect-Forward.html 

[Greg Gibbs · Accepted solution]

There is no direct method to set the preferred cipher as there is no direct access to the underlying OS. There are some mechanisms to remove support for some insecure ciphers, so you might look at these options.

1. Enable FIPS Mode
2. Remove support for specific ciphers in Administration > System > Settings > Security Settings