Cisco Firepower TLS decryption cipher list

[tunolno1]

Any active Firepower users - can you point me towards a list of cipher supprted for SSL decryption?

I can't find anything in the docs except stupid note that you have to ask TAC for it...

[Mark Elsen]

      % nmap -sV --script ssl-enum-ciphers -p 443   your-firepower-hostname 
      The above example tests on port 443 , usually uses for https , if there is another port using ssl and you
      want to test , then change the port number accordingly

 M.

[ccieexpert]

nmap to the firepower ip will not help determine decryption ciphers..

NMAP through the box to a few major websites will reveal the ciphers that it is supporting..

https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/device-config/740/management-center-device-config-74/decryption-rules.html#id_80972

*** Please mark as helpful if this was useful ***