https-client-security-level

Configures the security level for HTTPS connections initiated by a client.
Syntax
https-client-security-level
Command Default

The system is usually configured with default security level to make sure the compability across all the clients and servers.

Parameters
https-client-security-level
Displays and configures the security level for HTTPS made by a client.
Modes

Global Configuration Mode

Usage Guidelines

This command is supported on SmartZone controllers with FIPS mode enabled.

Examples

The following example displays and configures the HTTPS connection initiated by the client.

device(config)# https-client-security-level
    Level    Description
   -------   ----------------------------------------------------------------------

      1      Non-FIPS Ciphers and Signatures

    * 2      Ciphers    : TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                          TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_AES_128_GCM_SHA256,
                          TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                          TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_AES_256_GCM_SHA384
             Signatures : rsa_pkcs1_sha512, rsa_pkcs1_sha384, rsa_pkcs1_sha256,
                          ecdsa_secp521r1_sha512, ecdsa_secp384r1_sha384,
                          ecdsa_secp256r1_sha256, rsa_pss_rsae_sha512, rsa_pss_rsae_sha384,
                          rsa_pss_rsae_sha256, rsa_pss_pss_sha512, rsa_pss_pss_sha384,
                          rsa_pss_pss_sha256

      3      Ciphers    : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                          TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_AES_256_GCM_SHA384

             Signatures : ecdsa_secp521r1_sha512, ecdsa_secp384r1_sha384,
                          rsa_pss_rsae_sha512, rsa_pss_rsae_sha384, rsa_pss_pss_sha512,
                          rsa_pss_pss_sha384

Please select HTTPS client security level or 'No' to cancel: 3


Successful operation - https client security level [3]
% This configuration will take effect in 5 minutes.
History
Release version Command history
7.1.1.3 This command was introduced.