Cisco Systems OL-16647-01 CTL Provider

19-32
Cisco ASDM User Guide
OL-16647-01
Chapter 19 Adding Global Objects
CTL Provider
– Available Algorithms—Lists the available algorithms to be announced or matched during the
TLS handshake: des-sha1, 3des-sha1, aes128-sha1, aes256-sha1, and null-sha1.
Add—Adds the selected algorithm to the active list.
Remove—Removes the selected algorithm from the active list.
– Active Algorithms—Lists the active algorithms to be announced or matched during the TLS
handshake: des-sha1, 3des-sha1, aes128-sha1, aes256-sha1, and null-sha1. For client proxy
(acting as a TLS client to the server), the user-defined algorithms replace the original ones from
the hello message for asymmetric encryption method between the two TLS legs. For example,
the leg between the proxy and CallManager may be NULL cipher to offload the CallManager.
Move Up—Moves an algorithm up in the list.
Move Down—Moves an algorithm down in the list.
Modes
The following table shows the modes in which this feature is available:
CTL Provider
Use the CTL Provider option to configure Certificate Trust List provider service.
The CTL Provider pane lets you define and configure Certificate Trust List provider service to enable
inspection of encrypted traffic.
Fields
• CTL Provider Name—Lists the CTL Provider name.
• Client Details—Lists the name and IP address of the client.
– Interface Name—Lists the defined interface name.
– IP Address—Lists the defined interface IP address.
• Certificate Name—Lists the certificate to be exported.
• Add—Adds a CTL Provider.
• Edit—Edits a CTL Provider.
• Delete—Deletes a CTL Provider.
Modes
The following table shows the modes in which this feature is available:
Firewall Mode Security Context
Routed Transparent Single
Multiple
Context System
• • • •—