04-02-2018 09:37 AM - edited 03-01-2019 01:29 PM
I have a UCS environment on 3.1.1K firmware and I see that is TLS 1.2 capable (https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone/ssl-tls-vulnerability-response.pdf)
Is there any additional steps to make sure TLS 1.0 is disabled?
Thanks in advance.
04-02-2018 05:40 PM - edited 04-02-2018 05:43 PM
Greetings.
See
Looks like you can select TLSV1.2, and anything lower is blocked.
Allowed SSL Protocols |
Enables you to choose which SSL protocols can be used. Values are Default (Allow all except SSLv2 and SSLv3) and Only TLSV1.2. If you choose Only TLSV1.2, all web client connections trying to use less secure versions of TLS are blocked. |
Thanks,
Kirk...
04-03-2018 07:05 AM
Thanks for the prompt reply!
I went to this location and that is why I was confused in the first place, there is no "Allowed SSL Protocols" section in my Communication Services page. I confirmed they are running 3.1.1k
Any ideas on why that section would be missing?
04-03-2018 09:18 AM
Are you using the Java, or HTML version to view the UCSM?
Thanks,
Kirk...
04-06-2018 09:05 AM
FYI, this was confirmed a bug in 3.1.1k by TAC. You have to go to a minimum of 3.1.3a to be able to adjust these settings in the GUI or CLI.
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCux49157
Thank you!
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide