ASA TLS Change Question

[manofsteel03]

I have a question about disabling TLS 1.0 & 1.1 on ASA appliance. We have AnyConnect setup for our remote users and we also have a site-to-site vpn tunnel to a remote office. My question is by changing the settings identified in the below article, will this also affect our current site-to-site vpn tunnel connection? Or does the changing of these settings only affect the web url used for our AnyConnect users and ASDM?

https://freddejonge.nl/cisco-asa-disable-ssl-3-0-settings-and-change-it-to-tls-v1-2/

Thx for any assistance provided

[Rob Ingram · Accepted solution]

@manofsteel03 changing the TLS settings will have no impact on the Site-to-Site VPN, as they use IKE + IPSec.

You are correct, changing the TLS settings would affect ASDM, Clientless VPN and AnyConnect VPN - if using SSL/TLS and not IPSec.

[manofsteel03]

Thx for the feedback!