CIsco ASA 5512 ( 9.8.2) Support for Secure Renegotiation

[jawedparkar]

Hello Friends,

I am using Cisco asa 5512 on 9.8.2. due to recent security measurement we have enabled TLS 1.2 with custom ciphers.

However, SSL LAB shows there is no support for secure renegotiation.

I wanted to know if asa support this feature. Please share your information,

Thank You.

[Rahul Govindan]

The ASA does not support Secure Renegotiation AFAIK. Below is the enhancement bug raised to enable support for RFC5746, but this has not been fixed:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCud62637

I think you results on SSLlabs will always be capped at A- because of this. 

[jawedparkar]

Thanks Rahul for the information..

[Alex Pfeil]

Thanks for sharing.