• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1290
  • Last Modified:

Cisco ASA 5505 Possible Vulnerability in Net Tools PKI Server 1.0

I am trying to get our Cisco ASA 5505 running version 8.2(1) to pass a PCI compliance check.  I have one remaining issue to fix which is caused by the website on the ASA that allows SSL VPN access.

The message I get from the PCI compliance scan is 444:TCP Possible vulnerability in Net Tools PKI Server.  Contact the vendor for Hotfix 3 for Net Tools PKI Server 1.0.  

Port 444 is where I am running the SSL VPN portal

My question is, is this taken care of in version 8.2.2ED?  That is the only version that shows in my download list in the Upgrade Software from Cisco.com wizard within the asdm.
Steve Bantz
Steve Bantz
1 Solution
Did you assign a certificate to the ssl web service? Is it a commercial cert or a self-signed cert?
In Device Management / SSL Settings, choose SSL version for the security appliance to negotiate: SSL V3 Only
It's generally the SSL V1 that is the problem with the scanners..
I would go ahead and upgrade from 8.2.1. The latest available is 8.2.4
Steve BantzIT ManagerAuthor Commented:
It was running a self signed certificate.  I did change it to only accept SSL V3 only and it passed the PCI scan after that.  Thanks.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Choose an Exciting Career in Cybersecurity

Help prevent cyber-threats and provide solutions to safeguard our global digital economy. Earn your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now