what version you are running ? are other hosts able to go out ? ~Younes

You can go to the 9.X code but it will convert your NATing to the new Natting style. You will need to review your natting and nat exempt and make sure all OK  Younes

I did failed PCI scan with sweet32 bug Here is what I did for my ASA 5516x to pass the PCI scan for the sweet32  ; as described on CVE the Sweet32 vulnerability is  on  TLS using small size block cipher of 64 bit size; so I have forced  the asa to us...