web server ssl cipher-list

Configures or resets the cipher list for SSL connections.

Syntax

[no] web server ssl cipher-list {fips | cc-ndcpp | fips-and-cc-ndcpp | fips-high-security | cc-ndcpp-high-security | fips-and-cc-ndcpp-high-security | compatible}

Parameters

no

Resets the cipher list to its default.

fips

This cipher list is compliant with the Federal Information Processing Standard (FIPS) 140-2.

cc-ndcpp

This cipher list is compliant with Common Criteria Network Device Protection Profile (CC-NDPP).

fips-and-cc-ndcpp

This cipher list is compliant with both FIPS 6 and the Common Criteria Network Device Protection profile (CC-NDPP).

fips-high-security

This cipher list is compliant with FIPS and excludes low-security ciphers.

cc-ndcpp-high-security

This cipher list is compliant with CC-NDPP and excludes low-security ciphers.

fips-and-cc-ndcpp-high-security

This cipher list is compliant with both FIPS and CC-NDPP and excludes low-security ciphers.

compatible

Improved security that maintains backward compatibility.

Examples

The following example show how to configure FIPS 140-2 compliance that is used by the web server for SSL connections.

hostname (config) # web server ssl cipher-list fips

The following example shows how to configure CC-NDPP compliance that is used by the web server for SSL connections.

hostname (config) # web server ssl cipher-list cc-ndcpp

The following example shows how to configure FIPS 140-2 and CC-NDPP compliance that is used by the web server for SSL connections.

hostname (config) # web server ssl cipher-list fips-and-cc-ndcpp

The following example shows how to configure the high security compliance that is used by the web server for SSL connections. .

hostname (config) # web server ssl cipher-list high-security

The following example shows how to configure the compatible that is used by the web server for SSL connections.

hostname (config) # web server ssl cipher-list compatible

User role

Admin or Operator

Command mode

Config

Supported appliances

This command is supported on the following appliances running the specified releases or later: