BugZero | Cisco BugID CSCwb69503 - ASA unable to configure aes128-gcm@openssh.com whe...

Cisco - Defect ID: CSCwb69503

ASA unable to configure aes128-gcm@openssh.com when FIPS enabled

Cisco - Defect ID: CSCwb69503

ASA unable to configure aes128-gcm@openssh.com when FIPS enabled

Last updated on 4/23/2025

Overall: 6.16.1

Severity: 6.46.4

Lifecycle: 9.19.1

Popularity: 4.64.6

What is the BugZero Risk Score?

Vendor details

No defect details.

Overall: 6.16.1

Severity: 6.46.4

Lifecycle: 9.19.1

Popularity: 4.64.6

What is the BugZero Risk Score?

Vendor details

No defect details.

Symptom

Use ASA in FIPS mode

Conditions

Attempt to configure the following and get error ssh cipher encryption custom "aes128-gcm@openssh.com" ERROR: cipher encryption custom aes128-gcm@openssh.com is incompatible with fips compliance mode

Workaround

Further Problem Description

Original Vendor Announcement

9.65Defect ID: CSCwd45843
Auth Step latency for policy evaluation due to Garbage Collection activity.
9.65Defect ID: CSCwa92734
CUBE DTMF interworking fails from rtp-nte to OOB SIP methods
9.65Defect ID: CSCwj45822
Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability
9.65Defect ID: CSCvo03458
PKI "revocation check crl none" does not fallback if CRL not reachable
9.65Defect ID: CSCvq05584
Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Cisco - Defect ID: CSCwb69503

ASA unable to configure aes128-gcm@openssh.com when FIPS enabled

Cisco - Defect ID: CSCwb69503

ASA unable to configure aes128-gcm@openssh.com when FIPS enabled

Last updated on 4/23/2025

Vendor details

Vendor details

Description

Symptom

Conditions

Workaround

Further Problem Description

Links

Top Cisco defects by risk score

Ready to prevent the next vendor outage?