Observed vulnerability on Weak SSL/TLS Key Exchange on ASA5585-SSP-20:

[kpratt1]

Hi,

I'm trying to determine if I can update and strengthen weak SSL/TLS on an EOS ASA5585-SSP-20 that's running Version 9.1(4)5 code on it?

The current SSL config shows the following:

ssl server-version tlsv1-only

[AHack210 · Accepted solution]

Hi, unfortunately, 9.1 does not support TLS 1.2. I believe TLS 1.2 was introduced in 9.3(2) for both AnyConnect and the management plane.