FIPS. You can configure an ASA in accordance with FIPS to reject all connections non - FIPS Anyconnect

Hi dude, is he not automagically to refuse any connection Anyconnect an ASA compliant FIPS if the Anyconnect client is non-FIPS compatible?

Any help, ideas or thoughts are appreciated because I can't seem to find something to think about as you can.

Kind regards

Paul.

Hi Paul,.

By default, the ASA specifies the non-compliant FIPS RC4-SHA1 for the connection. To comply with FIPS, you must make sure that a compatible encryption FIPS is the first specified in the list of SSL encryption. Otherwise, the DTLS connection fails. In addition, we recommend that you remove all non-FIPS list ciphers in order to ensure that the connection failed does not occur.

In ASDM, go to Setup > remote access VPN > advanced > settings SSL to specify the types of SSL encryption. In the encryption area, move a FIPS compatible encryption at the first position in the list.

If you use CLI, use the encryption ssl from the global configuration mode command to order the list.

Kind regards

NGO

Tags: Cisco Security

Similar Questions

  • You can configure LACP in a stack with SG500

    Hi guys,.

    I'm looking to buy 2 x SG500-48 switches with the stacking cables and connect them in a stack ring topology.

    My reason for wanting this is so we can configure connections LACP of our servers in hyper-v to 2 stacked switches so the we have a redundant network connection if one of the switches is to fail. You can configure LACP links on stacked SG - 500 switches to be in the same group/link?

    Can of course

    -Tom
    Please mark replied messages useful
    http://blogs.Cisco.com/smallbusiness/

  • I can't boot into windows xp. The windows logo comes on but then a black screen blank (you can see and move the cursor with the mouse however) is displayed.

    I can't boot into windows xp. The windows logo comes on but then a black screen blank (you can see and move the cursor with the mouse however) is displayed.

    anesvet,
    I'm going to sound like I'm repeating myself tonight... (see previous 4 posts...)  but try this:

    When you start start pressing F8 until you get the Windows startup options.  Then try "Last known good configuration" see if that helps.  If this does not work, try to F * then try to go to Safe Mode.  If those who do not help, I would start with your XP CD to recovery mode and run "chkdsk/r" then "sfc/scannow".  QQ learn manage!

  • You can save the music from itunes with the sound recorder?

    You can save the music from itunes with the sound recorder?

    The principle is simple in nature, although the tape recorder is not the best option available for you, even in free software for audio recording you can.

    If you want to use sound recorder, you will need to get a 1/8 inch male-male stero (cable basically a helmet with two male ends) and put one of your speakers into your microphone in the port (line in).

    Then open sound recorder and give it a shot. The recorded files will be in .wav format, so you need to get a freeware to convert to program them to .mp3 if necessary. Or use this:

    http://www.media-convert.com/

    You can also use Windows Media Encoder 9, which in my opinion is much better in features and maintaining the quality. It is freely accessible to the public.

    http://www.Microsoft.com/downloads/details.aspx?FamilyID=5691ba02-e496-465a-bba9-b2f1182cdf24&displaylang=en

    You use the same configuration that with tape recorder, get a stereo cable and speaker output connection > microphone.

  • You can search for your personal library with Siri on the Apple TV and if so, how?

    You can search for your personal library with Siri on the Apple TV and if so, how?

    No, and it's a real shame...

  • You can use the new magic keyboard with Apple TV 4Gen?

    You can use the new magic keyboard with Apple TV 4Gen?

    The ATV4 does not support any Bluetooth keyboard. You can use the Apple TV iOS with her application.

  • You can create a table of contents with page numbers using bookmarks?

    You can create a table of contents with page numbers using bookmarks?

    Sometimes a long article has bookmarks to help navigate, it but has no real TOC (table of contents) on the first page. In such a situation, I think that it would facilitate the reading of the paper version if you can somehow create a table of contents with page based on hierarchical bookmarks in the document numbers.

    If this is not possible from Acrobat, is there a third party app?

    Indeed you have created a script for this - sorry that I missed it. I should have...

    Acrobat - Create TOC bookmarks

  • Windows store error "we could not connect to the Bank. This can occur because of a problem with the server or the connection may have expired. Please wait a few minutes and try again. »

    Original title: Windows 8 store does not.

    Whenever I try to open the windows store, I get the message: "we could not connect to the Bank. This can occur because of a problem with the server or the connection may have expired. Please wait a few minutes and try again. »

    This happens constantly, and because of that I have not been able to upgrade to Windows 8.1.

    Hello

    This behavior can occur if the antivirus application blocking the app Store or changes due to some recent on the computer.

    I would suggest trying the following steps and check if it helps.

    Method 1:

    Make sure that your PC is up to date

    Make sure that updates are installed on your PC and that your antivirus program does not prevent the application from running. For more information about installing updates for your PC, see Windows Update: frequently asked questions.

    Method 2:

    Run 'Windows Apps Store' convenience store

    You must be logged in as an administrator in order to run the "Windows Store Apps" troubleshooter. This tool can automatically find and fix some issues with applications. It is available in English only, but will work in all languages. You can let automatically try to fix any problems found, or select what you want made repairs.

    http://download.Microsoft.com/download/F/2/4/F24D0C03-4181-4E5B-A23B-5C3A6B5974E3/apps.diagcab

    Method 3:

    I suggest you delete the Windows Store cache and check how it works.

    1. Press Windows + R logo
    2. Type wsreset.exe in the run window, and then press ENTER.

    Method 4:

    Define the Apps approved in third program Antivirus- If you have a third party AV program installed, check its settings to make sure that the app Store works is not changed to be approved. If the AV program has the app as unreliable, it will block and prevent opening the app.

    Let us know the status of the issue. If you need help, please after return. We will be happy to help you.

  • You can configure automatic disconnection of a secure area at the exit of the Muse page?

    Hi people,

    Is there a way of setting upward an autodisconnect to muse page output?

    Rather disconnect manually I want the customer to be automatically disconnected when leaving the page.

    Ciao

    Cathy

    Surely, you can look into other options than PHP.

    Whenever a new page is loaded and logged, the session is created. You can store the time in a session variable, and then check that it has not exceeded a certain limit since the last time that a user saw a page.

    You can try JavaScript etc., take a look at these threads for more details:

    http://StackOverflow.com/questions/23023916/JavaScript-auto-logout-code

    http://StackOverflow.com/questions/22471896/automatically-logout-from-page/22471948

    http://www.scriptcase.NET/forum/forum/applications/control/1888-how-to-auto-logout-after-1 0-min-idle-time-% 7Bhelp %7 D

    Thank you

    Sanjit

  • You can use an external hard drive with the Mac Mini?

    I've seen videos that say that we cannot increase the ram on a min of Mac, but I'm curious if this works like an ordinary computer, if we can attach an external hard drive to store some of the memory to free up space. Sorry if this is something stupid just need to know what I can do with it.

    You can use an external hard drive to boot and run with any Mac. Its not going to improve or replace your ram. If you use a mechanical hard drive in any Mac then help and boot from an external drive, especially if it's a SSD will be significantly faster.

  • You can use an external hard drive with iPad Pro

    A disk external drive can be used with an iPad Pro?

    You can do it wirelessly with devices such as Wireless Connect from Sandisk stick.

    https://www.SanDisk.com/home/mobile-device-storage/connect-wireless-stick

    There are other devices that run a similar feature, but the Sandisk Connect is incredibly portable and usable also as a USB drive (even if it is a USB 2.0 device).  It is now available in capacities of 16 GB to 200 GB.

    I don't know of anyway to connect an iPad Pro on an external drive via a wired connection... Although it may be possible.

  • You can change the background color vi with a property node?

    I was wondering if it was possible in Labview to use a property node to change the background color of façade for an iteration, then back to an original color later. I don't think it's possible, but I would like to know for sure.

    Thank you

    Jody

    You can get the property pane directly node by right-clicking the scroll bar on the front panel and create-> property Node-> color pane.  Useful with multiple panes.  You can also click the property pane node in example of (imstuck) and choose link and then select the pane.

  • You can use Light Scribe DVD-R with Windows Vista disc?

    Is Light Scribe Possible with Vista?

    Hello

    You can use Lightscribe on a Windows Vista operating system. For more details, see the links.

    LightScribe Simple Labeler

    http://www.LightScribe.com/downloadSection/Windows/index.aspx?ID=811

    LightScribe: FAQ

    http://www.LightScribe.com/support/index.aspx?ID=304

  • You can use pfile instead of spfile with automatic shared memory management

    I decided to use the pfile instead of spfile method, because you can make comments in the file pfile. This became very useful however I think that I might be giving up some things.

    I want to know if I can use Automatic Shared Memory Management with a pfile.

    Also you can make to change the pfile to the database file. Example:
    change the system {some parameter} scope =... I would like here to pfile.

    Is this possible. I don't want to have to keep switching back, and I don't want to lose what I put in the pfile file. I read a great article in Oracle magizine on best practices for Oracle and one of them was to not use the spfile. Now, I can't find the article.

    Dear friend
    feature managent automatic memory or dynamic SGA , can not be used when you
    use pfile as meathod initialization of the instance. To use the dynamic SGA feature you
    must use the spfile.
    As you know the current status or the size of the SGA is determined by the
    Parameter SGA_TARGET , and when you want to change the size of the SGA for instnace this setting
    must be updated dynamically without restarting the ORACLE SERVER.

    And as a pfile cannot be updated by the ORACLE SERVER, it must be changed manually.
    so you cannot use automatic memory management while you use startup pfile.

    I hope this helps...

  • You can configure Internet wireless on windows server 2008 R2 datacenter?

    Is it possible to set up a wifi connection to Internet in Winsows Server 2008 R2 Datacenter, or do you need to connect to the Internet via an Ethernet cable?

    Hi Kim,

    The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums.

    http://social.technet.Microsoft.com/forums/en-us/w7itpronetworking/threads

Maybe you are looking for

  • My Time Capsule is reduced

    After having updated the latest firmware of the TC does not restart, and cannot be reset (soft, hard or by default).  Well that shut off the current for 2 days the problem is always to stay. The light is still amber. Anyone has idea how to solve?

  • My Satellite A110-180 always do a RAM test

    Hello. I can't allow a quick start (start without the RAM test) in my cell A110-180. I upgraded my RAM from 1 GB to 3 GB and I would like to disable the standard ram test when the laptop starts up because now becomes very slow. I've updated the origi

  • massenger does not open for me

    massenger not opening

  • Re: HP Compaq Mini 110 BIOS Password Reset

    Hello I have a Compaq mini 110 who crashes at startup and wrote Enter the current password now: After 3 entries, it stops with CNU9356DOJ Please help me. I'm at my wits end I have important data on this machine. Thank you.

  • Does not play his helmet

    Yesterday my computer worked fine. I was listening to music through my headphones. So, today he did not play sound via the headphones. I tried to do everything. I clicked on all that existed. I configured the speakers. I checked if it was cut, which