Disabling Diffie Hellman on Cisco Telepresence?

[jmorton1]

On a vulnerability scan, we are seeing findings for Diffie Hellman key exchange being supported in ports 443, 4047, and 4053. This is for Telepresence devices that are connected to and managed by Webex Control Hub. Does anyone know of a way ot shutting off Diffie Hellman? Can the web page be disabled on these devices and allow them to still work for video and audio calls?

[Wayne DeNardi]

There isn't any way to selectively disable particular crypto modules.   You either use it as is, or put it in FIPS mode (but that can be another whole world of headaches).