cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
19323
Views
90
Helpful
16
Replies

HTTP Strict Transport Security on ASA

gchevalley
Beginner
Beginner

Our PCI scan vendor has recently began flagging the outside interfaces of all of our firewalls that have AnyConnect enabled on them.  Does anyone know if there is a way to enable HSTS on AnyConnect / WebVPN or the outside interface?

16 Replies 16

vse
Beginner
Beginner

webvpn
 enable outside
 hsts
  enable
  max-age 31536000
  include-sub-domains
  no preload

gunnar.gud
Beginner
Beginner

Is there any way to prevent users from bypassing security issues (does HSTS work on Anyconnect itself?), such as cert errors or tls errors?

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers