Remediate ZOMBIE POODLE Vulnerability on FTD1010 managed via FDM

[kbowles]

Hi All,

After completing an external pentest we were informed our FTD1010 is vulnerable to the ZOMBIE POODLE attack. I have found articles on how to remove the affected CBC ciphers via FMC but our device is managed via FDM. Does anyone know of a way to complete this as I cant seem to find any information myself. This firewall is running code 7.4.2.1-30

Thanks!

[Marvin Rhoads]

You can follow this section of the configuration guide:

https://www.cisco.com/c/en/us/td/docs/security/firepower/740/fdm/fptd-fdm-config-guide-740/fptd-fdm-system.html#Cisco_Task_in_List_GUI.dita_80e542fa-4b68-4611-bdcc-c0dee2540488

There you will be able to disable the CBC ciphers.