Cisco Firepower 4110 Preparative Procedures & Operational User Manual page 68

Cisco Preparative Procedures & Operational User Guide
cipher-suites
specifications. You cannot use any spaces or special characters except ! (exclamation point), + (plus
sign), - (hyphen), and : (colon).For details, see
http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslciphersuite
In the evaluated configuration, you MUST configure the ciphersuites from the Approved ones listed
below.
8) Commit the transaction:
Firepower-chassis /system/services# commit-buffer
When CC mode is enabled, the FXOS will restrict the TLS versions to 1.1 and 1.2, and ciphersuites to
only the ones allowed below:
 TLS_RSA_WITH_AES_128_CBC_SHA as defined in RFC 3268
 TLS_RSA_WITH_AES_256_CBC_SHA as defined in RFC 3268
 TLS_DHE_RSA_WITH_AES_128_CBC_SHA as defined in RFC 3268
 TLS_DHE_RSA_WITH_AES_256_CBC_SHA as defined in RFC 3268
 TLS_RSA_WITH_AES_128_CBC_SHA256 as defined in RFC 5246
 TLS_RSA_WITH_AES_256_CBC_ SHA256 as defined in RFC 5246
 TLS_DHE_RSA_WITH_AES_128_CBC_ SHA256 as defined in RFC 5246
 TLS_DHE_RSA_WITH_AES_256_CBC_ SHA256 as defined in RFC 5246
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 as defined in RFC 5289
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 as defined in RFC 5289
© 2016 Cisco Systems, Inc. All rights reserved.
can contain up to 256 characters and must conform to the OpenSSL Cipher Suite