Vulnerability on Cisco Devices!!!

[orlandoegb]

I would like to know the best solution for this three issues on my cisco devices (pix 515e, asa5510, sw 2960s) detected by the Security Metrics Vision Vulnerability Scan:

1. SSL server accepts weak ciphers.

2. SSL certificate is signed with weak hash function: MD5.

3.TLS Protocol Session Renegotiation Security Vulnerability.

Thank you for any assistance!!!

Orlando

[James Leinweber]

> 1. SSL server accepts weak ciphers.

Specify just the ciphersuites you like, e.g.

    ssl encryption aes256-sha1 3des-sha1

I'm not sure about (2) and (3); open a TAC with Cisco; they may not be possible to work around on the current software.

-- Jim Leinweber, WI State Lab of Hygiene