Removing SSLv2 support

[Michael986]

Our SGE2010 switch is accepting connections using SSLv2 (according to the PCI compatibility scanner)

Is there a way to prevent it from accepting / responding to connections using this version of SSL but still allowing connections using SSLv3 or TLS?

If not, can I switch off SSL connections alltogether - and if I do this, can I switch it on/off from a telnet session to allow me to switch on the web interface when changes are required?

Thanks

Michael

[jasbryan]

Micahel,

Don't think there is a way to disable the SSL/HTTPs for accepting request but you can look around in lcli - lcli isn't officially supported and very little information on Cli on these switches.

https://supportforums.cisco.com/message/3515143#3515143

Jasbrayn

[Michael986]

Thanks for your response Jasbrayn,

However, how would you suggest I go about getting a definitive answer from Cisco on this? The problem is that this device is 'in scope' for our PCI compliance, and accepting connections on SSLv2 is a straightforward 'fail'.

As we only bought this device 6 months ago, I would have thought that (especially with PCI compliance being well established) there would be some way to disable what is, in effect, 10+ year old technology

Michael