SSL Ciphers

[Ma3n]

hey everyone 

I have an FTD1010 Firewall with an ASA 9.13(1) installed on it 

am having a problem with my SSL VPN

I checked a little and I found that I have only one cipher which is DES-CBC-SHA

this is the output of my show SSL ciphers

Current cipher configuration:
default (low):
  DES-CBC-SHA
tlsv1 (low):
  DES-CBC-SHA
tlsv1.1 (low):
tlsv1.2 (low):
dtlsv1 (low):
dtlsv1.2 (low):

aren't there supposed to be more algorithms ?

[Rob Ingram]

Hi,

Does it permit you to change the SSL ciphers? If not what license do you have?

For example:-

ssl server-version tlsv1.2
ssl client-version tlsv1.2
ssl cipher default high
ssl cipher tlsv1.2 high
ssl dh-group group24

 HTH

[Ma3n]

yes it does permit and am waiting for my smart license
i have another ASA 5506X that already has the ssl ciphers with out even using the license.

[Marvin Rhoads]

One of them was probably ordered with the "k8" SKU vs. "k9". The difference is that k9 includes strong ciphers from the factory image. With k8 you need to activate via licensing.

[marce1000]

 - Available cipher sometimes also depend on software version being used and or later versions may provide extra ciphers.

 M.

[Ma3n · Accepted solution]

hello everyone

i found the solution the moment that i connected the FTD to the Cisco Cloud for Licensing procedure the SSL Ciphers were available

thank you all for your help