older version of openssl in cisco asa 5520

[sridhar ch]

Hi,

Recently my security has scanned all the network devices for vulnerabilities and found that cisco asa 5520 , which we use for RAS VPN has older version of openssl. Have  to  check that and fix this problem? FYI, recently we have installed a SSL cert for webmail users.

Thanks,

Sridhar

[Marcin Latosiewicz]

Sridhar,

W update OpenSSL libraries on our side quite often, especially if new vulnarabilities are found.

You can check recently published vulnarabilities in www.cisco.com/go/psirt (not only specific to ASA)

In general ASA 8.4 is what you should go for to have "latest and greatest" revisions of openssl and ASA code itself.

Marcin