On Tue, Jan 19, 2016 at 12:06 PM, Pawel Stankowski <Pawel.Stankowski at fara.no> wrote: > GnuTLS debug client 3.3.15 > Checking <...>:443 > for SSL 3.0 (RFC6101) support... no > whether we need to disable TLS 1.2... yes > whether we need to disable TLS 1.1... yes This looks like a broken server which fails if the client advertises anything more than TLS 1.0. Are you sure that's a cisco server and there is no a box in the middle? Could you send me the IP of the server? regards, Nikos