Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I didn't come across any post mentioning this topic - so just posting this in case it helps someone else In ASA crypto maps, the entry; crypto map name_map x set pfsHas previously defaulted to group2 (and if you entered crypto map name_map x se...
Hi, Could someone confirm exactly what the FPR2K-ENC-K9 'strong encryption (3DES/AES)' licence covers on firepower boxes? Cisco doco states: -Strong Encryption (3DES/AES) license—FPR2K-ENC-K9 . Although this license is not generally required (for exa...
They're not removed yet in 9.14, they're just deprecatedYou get a warning, for example if configuring pfs group2 you get WARNING: DH group 2 is considered insecure. This option is deprecated and will be removed in a later version. But the config is s...
In case it helps anyone else confused by Cisco's documentation (?) on the topicFrom experience with a FPR2110 running ASA code in appliance mode On first boot with { sh ver / sh lic feat } the initial status shows as: - Encryption-3DES-AES : Dis...
And elsewhere in the Firepower smart lic doco it lists strong encryption depending on the (smart) account export compliance Kind of suggesting a std smart lic'd box would get 3DES/AES type stuff as long as the smart account has export compliance stat...
Thanks for the quick reply Rob Its all Smart Licence on the Firepower boxesAs you say its a $0 lic at box order time but Cisco Lic TAC say it is a chargeable lic if you want to retrospectively order it for an already delivered box - hence why i'm try...
