Need to allow TLS_DH_anon_WITH_RC4_128_MD5 in ASA what is the command to do so

[Hemakumar Sampath]

                   Hi

Recently we had issue in Microsoft Office communicator, users were not able to share their desktops however the ports are enabled. A microsoft has said that this Cipher suit is normally blocked in firewall and we have to enable it ( TLS_DH_anon_WITH_RC4_128_MD5 ).

Please provide the command to do so.

We are running ASA asa902-smp-k8.bin

[jumora]

If you are actually doing this from one interface to another you should see what the ASA is dropping and in that case enable logs at debugging level through ASDM and or CLI and filter our the IP address that is generating the traffic.

If you need assistance on this please let me know.

[jumora]

ASA 8.2: Configure Syslog using ASDM

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080b83d04.shtml

[cisco.met.co.uk]

The ASA won't block any cypher suite unless its specifically configured to terminate the TLS/SSL session,.

At a guess its probably being directed to a server that does not support that cipher suite.

[pepiscop]

Are yours users behind a proxy?

peter