Forum Discussion

The-messenger's avatar
The-messenger
Icon for Cirrostratus rankCirrostratus
Oct 15, 2018

Expected Results for changing a Cipher Suite

I'm working on removing tlsv1 tlsv1_1 from the available ciphers on all connections. In the past I've done this, on the fly, with no notice by users but with a recent change I had issues with a couple applications.

 

Before I assume the applications require these ciphers I want to ask, what should I expect to see when removing ciphers? If I remove a cipher, at any given moment there are 2000 sessions.

 

Is it expected that connections currently using those ciphers would break, users could see temporary service interruption?

 

One of the apps that I had an issue with is ActiveSync.

 

  • Any existing sessions will remain after you make the profile change. But renegotiations and new SSL sessions will take the new settings.