Resilient Infrastructure

Overview

We will be delivering critical security enhancements across Cisco products, some of which may require our customers to take action. We're committed to making this transition as seamless and non-disruptive as possible and will continue to update this page for the latest guidance and resources. Here’s what else you need to know.

• Proactive Security Enhancements: To increase the security posture of Cisco devices, we are making changes to default settings, deprecating and eventually removing insecure capabilities, and introducing new security features. These changes are designed to strengthen your network infrastructure and provide better visibility into threat actor activities.
• Your Action is Key: We encourage all customers to adopt improved security practices now and discontinue the use of insecure features. This will strengthen your security posture and prepare you for these essential enhancements.
• Comprehensive Guidance: This page provides up-to-date information on these changes, our strategy for phasing them in, and specific actions you should take now to be ready.

Cisco is continuously evolving its product portfolio to address the growing complexity and sophistication of today’s threat landscape. As part of this commitment, we are enhancing default configurations to provide stronger out-of-the-box protection, introducing advanced security capabilities to safeguard modern deployments, and retiring legacy features that no longer align with current security standards. These changes are designed to help organizations build and maintain a more resilient, secure, and future-ready infrastructure. We strongly encourage customers to adopt these modern capabilities and align their deployments with industry best practices. For additional guidance on building resilient infrastructure, please visit www.cisco.com/go/ri.

This document provides guidance on how to migrate to the secure alternatives of outdated/legacy protocols in your Meraki networks.

The following list of features and protocols are planned for eventual removal from Cisco products. The list provides details on why the feature or protocol is considered insecure and suggests secure alternatives when available. Not all platforms and operating systems support all these features.

These features and protocols will be phased out gradually. Platform-specific details on when each feature will reach the warning, restriction, and removal phases are planned to be provided well in advance of the change. 

Configuring secure alternatives