On November 21st, 2024 Cisco will disable the following weak ciphers on our servers:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_RSA_WITH_AES_256_CBC_SHA
Changes will impact:
* Opendns.com - dashboard and APIs
* Umbrella.com - dashboard and APIs
* Dnsomatic.com
* Dynamic IP Updater Client
* Roaming Client and AnyConnect Roaming Module registration and sync services
These weak ciphers are typically used in older environments like Windows XP, Windows 7, or Internet Explorer 11. It's also possible that they are used in network devices like routers and wireless access points.
Although Cisco
ended support for Windows 7, 8, and 8.1 in 2022, we did not make any breaking changes at that time. However, to ensure the highest levels of security for our customers, we are now disabling weak ciphers due to their associated security concerns. This message serves as a courtesy notification to customers still using these unsupported operating systems.
Please contact support if you need help with this change.
