disabling TLSv1.0 on ASA5505

[raycourtney]

I have an ASA5505 that is failing a PCI DSS Scan because it uses TLS1.0

Is there any way to disable this protocol?

[Karsten Iwen · Accepted solution]

You have to disable all SSL/TLS-VPN and also ASDM/HTTPS-access as TLS 1.0 is the most that this old device supports. Or even better, replace it with a still supported device. The ASA 5508 could be a valid choice and that one supports TLS 1.2.