On November 21st, 2024 Cisco will disable the following weak ciphers on our servers:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA
Changes will impact:
* Opendns.com - dashboard and APIs
* Umbrella.com - dashboard and APIs
* Dnsomatic.com
* Dynamic IP Updater Client
* Roaming Client and AnyConnect Roaming Module registration and sync services
These weak ciphers are typically used in older environments like Windows XP, Windows 7, or Internet Explorer 11. It's also possible that they are used in network devices like routers and wireless access points.
Cisco
ended support for client software on Windows 7, 8 and 8.1 in 2022, but we did not make any breaking changes at that time. We recommend customers use the latest operating systems versions with support for strong encryption, but we understand there are sometimes exceptions and it's not always possible for our customers to completely move off of legacy systems. This is why we've extended backwards compatibility as long as possible beyond Cisco's previously published end of support date.
