ASA 9.8 - Disable TLS V1.0

[Mokhalil82]

Hi

I am looking at disabling TLS V1.0 on our ASAs. I am running ASA Version 9.8 and ASDM Version 7.9.

Currently I have 2 IPSEC VPNs and 0 RA VPNs.

I can see in ASDM how to change the minimum SSL level to use. So i can change it from here to use atleast TLS 1.1. 

What effect will this have on my IPSEC tunnels and my access to the ASA using ASDM. I would make the changes out of hours. 

TIA

[Rahul Govindan · Accepted solution]

You can set TLS 1.1 as the minimum version to be used by ASA as an SSL client or server. This should effectively disable TLSv1 on the ASA. IPsec should not be affected by this. ASDM may be affected if your client does not support anything above TLS v1.

CLI commands:

      ssl server-version tlsv1.1
      ssl client-version tlsv1.1