09-07-2023 07:44 AM
Kind of an odd question but hoping someone can help. Getting ready to upgrade my 5506-X to 9.16, and as part of that I want to test performance with updated algorithms while also not disrupting my existing users. Unfortunately I don't have a lab machine to test the config with, so I'm wondering if it's possible to specify an SSL VPN config for a specific local user account while leaving the other config in place.
Solved! Go to Solution.
09-07-2023 07:58 AM
@Scott jones 15222 the algorthims are configured globally, so any changes you make will apply to all users.
If you wish to determine what is currently in use because you wish to disable the weaker algorithms, use the command "show vpn-sessiondb ratio encryption" this will provide an output on what the algorithms the clients are currently connected using, which may assist you. You should then be able to refine your configuration accordingly.
09-07-2023 07:58 AM
@Scott jones 15222 the algorthims are configured globally, so any changes you make will apply to all users.
If you wish to determine what is currently in use because you wish to disable the weaker algorithms, use the command "show vpn-sessiondb ratio encryption" this will provide an output on what the algorithms the clients are currently connected using, which may assist you. You should then be able to refine your configuration accordingly.
09-07-2023 08:31 AM
Ah gotcha. That definitely helps! Appreciate the info
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide