About Web Security Appliance
The Cisco Web Security Appliance intercepts and monitors Internet traffic and applies policies to help keep your internal network secure from malware, sensitive data loss, productivity loss, and other Internet-based threats.
Supported Ciphers
This section contains the list of supported ciphers (SSL and SSH) for AsyncOS for Web Security Appliance.
Port 8443 (Management Interface)
SSL V 3.0 |
TLS 1.0 |
TLS 1.1 |
TLS 1.2 |
---|---|---|---|
ECDHE-RSA-AES256-SHA |
ECDHE-RSA-AES256-SHA |
ECDHE-RSA-AES256-SHA |
ECDHE-RSA-AES256-GCM-SHA384 |
DHE-RSA-AES256-SHA |
DHE-RSA-AES256-SHA |
DHE-RSA-AES256-SHA |
ECDHE-RSA-AES256-SHA384 |
DHE-RSA-CAMELLIA256-SHA |
DHE-RSA-CAMELLIA256-SHA |
DHE-RSA-CAMELLIA256-SHA |
ECDHE-RSA-AES256-SHA |
AES256-SHA |
AES256-SHA |
AES256-SHA |
DHE-RSA-AES256-GCM-SHA384 |
CAMELLIA256-SHA |
CAMELLIA256-SHA |
CAMELLIA256-SHA |
DHE-RSA-AES256-SHA256 |
ECDHE-RSA-AES128-SHA |
ECDHE-RSA-AES128-SHA |
ECDHE-RSA-AES128-SHA |
DHE-RSA-AES256-SHA |
DHE-RSA-AES128-SHA |
DHE-RSA-AES128-SHA |
DHE-RSA-AES128-SHA |
DHE-RSA-CAMELLIA256-SHA |
DHE-RSA-SEED-SHA |
DHE-RSA-SEED-SHA |
DHE-RSA-SEED-SHA |
AES256-GCM-SHA384 |
DHE-RSA-CAMELLIA128-SHA |
DHE-RSA-CAMELLIA128-SHA |
DHE-RSA-CAMELLIA128-SHA |
AES256-SHA256 |
AES128-SHA |
AES128-SHA |
AES128-SHA |
AES256-SHA |
SEED-SHA |
SEED-SHA |
SEED-SHA |
CAMELLIA256-SHA |
CAMELLIA128-SHA |
CAMELLIA128-SHA |
CAMELLIA128-SHA |
ECDHE-RSA-AES128-GCM-SHA256 |
ECDHE-RSA-AES128-SHA256 |
|||
ECDHE-RSA-AES128-SHA |
|||
DHE-RSA-AES128-GCM-SHA256 |
|||
DHE-RSA-AES128-SHA |
|||
DHE-RSA-SEED-SHA |
|||
DHE-RSA-CAMELLIA128-SHA |
|||
AES128-GCM-SHA256 |
|||
AES128-SHA256 |
|||
AES128-SHA |
|||
SEED-SHA |
|||
CAMELLIA128-SHA |
Port 443 (HTTPS Proxy Service)
SSL V 3.0 |
TLS 1.0 |
TLS 1.1 |
TLS 1.2 |
||
---|---|---|---|---|---|
DHE-RSA-AES256-SHA |
DHE-RSA-AES256-SHA |
DHE-RSA-AES256-SHA |
DHE-RSA-AES256-GCM-SHA384 |
||
DHE-RSA-CAMELLIA256-SHA |
DHE-RSA-CAMELLIA256-SHA |
DHE-RSA-CAMELLIA256-SHA |
DHE-RSA-AES256-SHA256 |
||
AES256-SHA |
AES256-SHA |
AES256-SHA |
DHE-RSA-AES256-SHA |
||
CAMELLIA256-SHA |
CAMELLIA256-SHA |
CAMELLIA256-SHA |
DHE-RSA-AES128-GCM-SHA256 |
||
DHE-RSA-AES128-SHA |
DHE-RSA-AES128-SHA |
DHE-RSA-AES128-SHA |
DHE-RSA-AES128-SHA |
||
DHE-RSA-SEED-SHA |
DHE-RSA-SEED-SHA |
DHE-RSA-SEED-SHA |
DHE-RSA-CAMELLIA256-SHA |
||
DHE-RSA-CAMELLIA128-SHA |
DHE-RSA-CAMELLIA128-SHA |
DHE-RSA-CAMELLIA128-SHA |
DHE-RSA-AES128-SHA256 |
||
AES128-SHA |
AES128-SHA |
AES128-SHA |
SEED-SHA |
||
SEED-SHA |
SEED-SHA |
SEED-SHA |
CAMELLIA128-SHA |
||
CAMELLIA128-SHA |
CAMELLIA128-SHA |
CAMELLIA128-SHA |
CAMELLIA256-SHA |
||
DHE-DSS-AES256-SHA |
DHE-DSS-AES256-SHA |
DHE-DSS-AES256-SHA |
AES256-SHA |
||
DHE-DSS-CAMELLIA256-SHA |
DHE-DSS-CAMELLIA256-SHA |
DHE-DSS-CAMELLIA256-SHA |
AES128-SHA256 |
||
DHE-DSS-AES128-SHA |
DHE-DSS-AES128-SHA |
DHE-DSS-AES128-SHA |
AES128-GCM-SHA256 |
||
DHE-DSS-SEED-SHA |
DHE-DSS-SEED-SHA |
DHE-DSS-SEED-SHA |
AES256-SHA256 |
||
DHE-DSS-CAMELLIA128-SHA |
DHE-DSS-CAMELLIA128-SHA |
DHE-DSS-CAMELLIA128-SHA |
AES256-GCM-SHA384 |
||
DES-CBC3-SHA |
DES-CBC3-SHA |
DES-CBC3-SHA |
AES128-SHA |
||
EDH-RSA-DES-CBC3-SHA |
EDH-RSA-DES-CBC3-SHA |
EDH-RSA-DES-CBC3-SHA |
DHE-RSA-AES128-SHA |
||
IDEA-CBC-SHA |
IDEA-CBC-SHA |
IDEA-CBC-SHA |
DHE-RSA-SEED-SHA |
||
ADH-AES128-SHA |
ADH-AES128-SHA |
ADH-AES128-SHA |
DHE-RSA-CAMELLIA128-SHA |
||
ADH-SEED-SHA |
ADH-SEED-SHA |
ADH-SEED-SHA |
DES-CBC3-SHA |
||
ADH-CAMELLIA128-SHA |
ADH-CAMELLIA128-SHA |
ADH-CAMELLIA128-SHA |
EDH-RSA-DES-CBC3-SHA |
||
ADH-AES256-SHA |
ADH-AES256-SHA |
ADH-AES256-SHA |
IDEA-CBC-SHA |
||
ADH-CAMELLIA256-SHA |
ADH-CAMELLIA256-SHA |
ADH-CAMELLIA256-SHA |
ADH-AES256-GCM-SHA384 |
||
ADH-DES-CBC3-SHA |
ADH-DES-CBC3-SHA |
ADH-DES-CBC3-SHA |
ADH-AES256-SHA256 |
||
ADH-AES256-SHA |
|||||
ADH-CAMELLIA256-SHA |
|||||
ADH-AES128-GCM-SHA256 |
|||||
ADH-AES128-SHA256 |
|||||
ADH-AES128-SHA |
|||||
ADH-SEED-SHA |
|||||
ADH-DES-CBC3-SHA |
|||||
ADH-CAMELLIA128-SHA |
|||||
DHE-DSS-AES256-GCM-SHA384 |
|||||
DHE-DSS-AES256-SHA256 |
|||||
DHE-DSS-AES256-SHA |
|||||
DHE-DSS-CAMELLIA256-SHA |
|||||
DHE-DSS-AES128-GCM-SHA256 |
|||||
DHE-DSS-AES128-SHA256 |
|||||
DHE-DSS-AES128-SHA |
|||||
DHE-DSS-SEED-SHA |
|||||
DHE-DSS-CAMELLIA128-SHA |
|||||
Default Mode: AES128-SHA DHE-RSA-AES128-SHA |
Default Mode: AES128-SHA DHE-RSA-AES128-SHA |
Default Mode: AES128-SHA DHE-RSA-AES128-SHA |
Default Mode: AES128-SHA256 AES128-GCM-SHA256 AES256-SHA256 AES256-GCM-SHA384 AES128-SHA DHE-RSA-AES128-SHA |
||
|
|||||
|
Port 22 (SSH Port)
OpenSSH_7.3p1:
1. key_algorithm (7):
|
2. encryption_algorithm (8):
|
3.mac_algorithms (4):
|
Unsupported Ciphers
This section contains the list of unsupported ciphers.
Port 8443 (Management Interface)
SSL V 3.0 |
TLS 1.0 |
---|---|
RC2-CBC-MD5 |
RC2-CBC-MD5 |
RC4-MD5 |
RC4-MD5 |
IDEA-CBC-MD5 |
IDEA-CBC-MD5 |
DES-CBC3-MD5 |
DES-CBC3-MD5 |