Cisco ASA 5512X - SSL Server Settings

[jtracey81]

To alleviate a couple of found security issues with our ASA 5512X, I am looking at changing the SSL settings for the device.

Currently, it is set to a Custom / TLS1 for both server and client.

If I configure this to be a HIGH/TLS1.2 for the server configuration (or any different configuration), will this affect my site to site VPNs that I have at my location?  If my users are using the 4.7.xxxx AnyConnect mobility client, there should be no problems with them still connecting?

Thanks in advance!

[Rob Ingram]

Hi,
Site-to-Site VPNs use IPSec and not TLS, so there should be no impact. You should probably be ok for remote access users, assuming that they are not connecting from really old operating systems that do not support TLS1.2 and newer ciphers.

HTH