SSL Medium Strength Cipher Suites Supported (SWEET32)

[IT security]

SSL Medium Strength Cipher Suites Supported (SWEET32) & SSL Medium Strength Cipher Suites Supported (SWEET32)

Hello,

In my company we have run tenable scan and we have Vulnerability in  Cisco switch Catalyst 3850 48 Port PoE  (SSL Medium Strength Cipher Suites Supported (SWEET32) and SSL Medium Strength Cipher Suites Supported (SWEET32)

Can you help to fix this issue ? Can any one help in this issue.

[Rob Ingram]

@IT security do you actually use the WebGUI on the switch? If not you'd be best to disable https using the command no ip http secure-server.  If you do still use https then enable the strongest ciphers your switch support using the command ip http secure-ciphersuite  You may need to upgrade your firmware version to support the stronger ciphers.