If we are not using web VPN or the web interface to install clients, does the cryptographic settings on the web site affect the security of AnyConnect client use in any way?
The SSL Labs site has warnings about the site supporting TLS 1.0 and not supporting TLS 1.2, 1.3, forward secrecy, secure renegotiation or AEAD ciphers.
Does any of this matter if no users are entering their credentials into the web interface since they don't use web VPN and they don't manually install the AnyConnect client through their browsers?
Would those SSL settings for the web interface affect how the AnyConnect client communicates?
