Hi Team,
We are trying to scan the ASA firewall and getting the below error. Is there any way to resolve this issue? Please sugget.
We did a security scan of Internal firewall and found one issue - "TLS
Session Renegotiation Vulnerability"
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, does
not properly associate renegotiation handshakes with an existing
connection, which allows man-in-the-middle attackers to insert data into
HTTPS sessions, and possibly other types of sessions protected by TLS or
SSL, by sending an unauthenticated request that is processed
retroactively by a server in a post-renegotiation context, related to a
"plaintext injection" attack
