Pen test on ASAx shows weak TLS

[Andrew White]

Hello,

I've run a Pen test against our ASAx and it shows weak TLS, how do I fix this and what side effects might we get. We also use the Cisco Anyconnect for our remote users as I guess they use this?

https://www.ssllabs.com/ssltest

Screenshot attached

[honza.sotek]

You must change SSL settings in Remote Access VPN -> Advanced

Encryption TLSV 1.2 other it is possible disable and set custom Cipher Security Level

ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES256-SHA384 ECDHE-RSA-AES256-SHA384 DHE-RSA-AES256-SHA256