Reviewing the minimum Transport Layer Security (TLS) version requirement using the CLI

Prev Next

Use the CLI commands in this section to review the minimum version requirement setting for Transport Layer Security (TLS).

To review the required minimum TLS version using the CLI:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Review the minimum TLS version requirement:

    hostname (config) # show web

    The results of this command will look similar to this:

    Web User Interface server:
    	Web interface enabled:          yes
    	HTTP enabled:                   no
    	HTTP port:                      8000
    	HTTP redirect to HTTPS:         yes
    	HTTPS enabled:                  yes
    	HTTPS port:                     3000
    	HTTPS protocols:                TLSv1.2
    	HTTPS minimum protocol version: TLSv1.2
    	HTTPS cipher list:              compatible
    	HTTPS certificate name:         system-self-signed
    	HTTPS CA chain name:
    
    	Listen enabled: yes
    	Listen Interfaces:
    	Interface: tun0
    
    	Inactivity timeout:     7 hr 40 min
    	Session timeout:        8 hr
    	Session renewal:        7 hr 55 min
    
    Web file transfer proxy:
    	Proxy enabled: no
    
    Web file transfer certificate authority:
    	HTTPS server cert verify: yes
    	HTTPS supplemental CA list: default-ca-list
    
    Web preferences:
    	Global alerts auto refresh enabled: yes
    
    HTTPS client minimum protocol version: TLSv1
    HTTPS client cipher list: compatible
    

    The HTTPS minimum protocol version line shows the minimum version requirement for TLS for the appliance.