Prime Infra and NCS Vulnerability

[Bruno Rangel]

Hi Team

We have a Cisco Prime Network Control System running version: Version : 1.1.1.24.
A security audit/scan found out they has a Secure Sockets Layer (SSL) v3/Transport Layer Security (TLS) v1 Protocol Weak and a Vulnerability.
Need to know if is possible disable on NCS and PI the SSL3, TLS1 and SHA1?

[Ajay Mishra · Accepted solution]

with PI 2.1 , we have Security Advisories, Responses and Notices @    http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-infrastructure-2-1/model.html

[Bruno Rangel]

Hey Guys

Thanks for your Reply...

[Marvin Rhoads · Accepted solution]

You cannot disable those features, they are inherent to operating a secure web server.

You should upgrade to a version that patches the vulnerability.

For Prime Infrastructure that was fixed as of Release 2.2.1. That and all later versions will not have the vulnerability.

Your Prime NCS 1.1.1.24 is very old and I don't believe a patch is available for that end of sales product. Most of these SSL vulnerabilities were identified in Fall 2015 and the last NCS 1.1 patch was released in early 2015.