SSL Certificate Signed Using Weak Hashing Algorithm Catalyst 3750-X

[Minato]

SSL Certificate Signed Using Weak Hashing Algorithm & SSL Medium Strength Cipher Suites Supported (SWEET32)

Hello All,

In my company we have run tenable scan and we have Vulnerability in Catalyst 3750-X Series (SSL Medium Strength Cipher Suites Supported (SWEET32) and SSL Medium Strength Cipher Suites Supported (SWEET32)

Can you help to fix this issue ? Can any one help in this issue.

[balaji.bandi]

1. Upgrade to latest code

2. Remove SSHv1  and enable  SSHv2 (ip ssh version2)

3. you can also use latest ciphers to protect the switch.

4. if no upgrade option available use ACL to only allow IP to connect to switch.