Forum Discussion

uni's avatar
uni
Icon for Altocumulus rankAltocumulus
Mar 20, 2014

Best practice for clientssl profiles

Can anyone recommend their preferred settings for clientssl profiles? What cipher string, options and other flags do you use?   I usually test mine using , but get at best an "A-".  
application delivery
design
LTM
security
TMOS
Vitaliy_Savrans's avatar
Vitaliy_Savrans
Icon for Nacreous rankNacreous
Mar 20, 2014

Hi, my settings are:

NATIVE:!MD5:!EXPORT:!DES:!DHE:!EDH:!RC4+RSA:@SPEED

Good article about ciphers link

  • uni's avatar
    uni
    Icon for Altocumulus rankAltocumulus
    Mar 20, 2014
    Most of those are not needed. The defaults ciphers (11.4 and & 11.5) are tighter that than now I think. I was more interested in the other clientssl profile settings anyway.