Hello,
we have FTDs managed via FMC running ver 7.0. Recently, the ISP scan found a vulnerability on the outside interface of the FTD having weak a DH primes set. I updated the configuration for SSL DH group to: group14 (2048modulus) the highest available value i found in the FMC gui. Also the ECDHE value set to: group21 (521bit).
The ISP still found the vulnerability, now they recommend to disable the DH primes and use only ECDHE which is confirmed to be secure.
How can i do this. I mean disabling the DH prime completely.
