https-client-security-level
Configures the security level for HTTPS
connections initiated by a client.
Command Default
The system is usually configured with default security level to make sure the compability across all the clients and servers.
Parameters
Modes
Global Configuration Mode
Usage Guidelines
This command is supported on SmartZone controllers with FIPS mode enabled.
Examples
The following example displays and configures the HTTPS connection initiated by the client.
device(config)# https-client-security-level
Level Description
------- ----------------------------------------------------------------------
1 Non-FIPS Ciphers and Signatures
* 2 Ciphers : TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_AES_128_GCM_SHA256,
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_AES_256_GCM_SHA384
Signatures : rsa_pkcs1_sha512, rsa_pkcs1_sha384, rsa_pkcs1_sha256,
ecdsa_secp521r1_sha512, ecdsa_secp384r1_sha384,
ecdsa_secp256r1_sha256, rsa_pss_rsae_sha512, rsa_pss_rsae_sha384,
rsa_pss_rsae_sha256, rsa_pss_pss_sha512, rsa_pss_pss_sha384,
rsa_pss_pss_sha256
3 Ciphers : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_AES_256_GCM_SHA384
Signatures : ecdsa_secp521r1_sha512, ecdsa_secp384r1_sha384,
rsa_pss_rsae_sha512, rsa_pss_rsae_sha384, rsa_pss_pss_sha512,
rsa_pss_pss_sha384
Please select HTTPS client security level or 'No' to cancel: 3
Successful operation - https client security level [3]
% This configuration will take effect in 5 minutes.
History
| Release version | Command history |
|---|---|
| 7.1.1.3 | This command was introduced. |