Cisco Firepower 4100 Command Reference

set https
To specify HTTPS service parameters, use the set https command.
set https {auth-type {cert-auth|cred-auth}|cipher-suite cipher_string|cipher-suite-mode
{custom|high-strength|low-strength|medium-strength}|crl-mode {relaxed|strict}|keyring
keyring_name|port port_number}
Syntax Description
(Optional) Specifies the type of authentication to use for HTTPS access:
• cert-auth—Sets your system to use a client certificate in conjunction
with LDAP to authenticate users for HTTPS access.
• cred-auth—Sets the system to use credential-based user authentication
for HTTPS access.
auth-type
{cert-auth|cred-auth}
(Optional) Specifies the definition string for the cipher suite to be used with
the custom cipher-suite-mode.
The specification string can contain up to 256 characters and must conform to
the OpenSSL Cipher Suite specifications. You cannot use any spaces or special
characters, except ! (exclamation point), + (plus sign), - (hyphen), and : (colon).
See http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslciphersuite for
additional information.
This string is ignored if cipher-suite-mode is set to anything other
than custom.
Note
cipher-suite cipher_string
(Optional) Sets the level of Cipher Suite security used:
• custom—Lets you define a custom Cipher Suite security specification
string using the cipher-suite option.
• high-strength—ALL:!EDH-RSA-DES-CBC3-SHA:
!EDH-DSS-DES-CBC3-SHA: !DES-CBC3-SHA:!ADH:!3DES:
!EXPORT40:!EXPORT56:!LOW:!MEDIUM:!eNULL:!RC4:!MD5:
!IDEA:+HIGH:+EXP
• low-strength—ALL:!EDH-RSA-DES-CBC3-SHA:
!EDH-DSS-DES-CBC3-SHA: !DES-CBC3-SHA:!ADH:!3DES:
!EXPORT40:!EXPORT56:RC4+RSA:
!IDEA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL
• medium-strength—ALL:!EDH-RSA-DES-CBC3-SHA:
!EDH-DSS-DES-CBC3-SHA:
!DES-CBC3-SHA:!ADH:!3DES:!EXPORT40:!EXPORT56:
!LOW:!RC4:!MD5:!IDEA:+HIGH:+MEDIUM:+EXP:+eNULL
Generally, cipher strength is roughly based on the bits of security (or symmetric
key size), with ‟low” meaning less than 128 bits of security, ‟medium” meaning
equal to 128 bits, and ‟high” meaning greater than 128 bits of security.
cipher-suite-mode
{custom| high-strength|
low-strength
Cisco Firepower 4100/9300 FXOS Command Reference
192
S Commands
set https

Cisco Firepower 4100 Specifications

General

Brand	Cisco
Model	Firepower 4100
Category	Firewall
Language	English