Cisco Cisco Expressway Release Notes
TLS Support Restricted
To improve security, the Expressway now only supports specific versions of TLS. The Expressway offers and accepts
TLS versions 1.0, 1.1, and 1.2, when establishing secure connections.
TLS versions 1.0, 1.1, and 1.2, when establishing secure connections.
Changes and Minor Enhancements
■
From version X8.8 onwards, the Expressway does not create DSA host keys. It creates RSA or ECDSA keys
instead, for improved security.
instead, for improved security.
If you upgrade a system that already has a DSA host key, the existing key will persist so that SSH client users
do not have to verify the fingerprint again.
do not have to verify the fingerprint again.
■
From version X8.8 onwards, connections between cluster peers use TLS instead of IPSec. When you upgrade
a cluster, the cluster comes up in TLS permissive mode.
a cluster, the cluster comes up in TLS permissive mode.
■
Multiple Device Messaging (a new feature in IM and Presence Service 11.5) is now supported for clients that
connect through Expressway to IM and Presence Service in the cloud.
connect through Expressway to IM and Presence Service in the cloud.
This feature is not supported through any versions of Expressway before X8.8.
13
Cisco Expressway Series Release Notes
Features in X8.8