For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sabir_Alvi's avatar
Sabir_Alvi
Icon for Altocumulus rankAltocumulus
Feb 16, 2018

Bigip 11.2.1 - weak ciphers

I have BiGIP 11.2.1 in my test lab and below Cipher suite for SSL profile:   TLSv1_2:!SSLv3:!RC4-SHA:!3DES:!DH:!ADH:!EDH:!MD5:!EXPORT:!DES:@STRENGTH   However there are few open weak ciphers wh...
application delivery
BIG-IP
cipher
LTM
ssl
tls
Ilian_Ivanov's avatar
Ilian_Ivanov
Icon for Nimbostratus rankNimbostratus
Feb 16, 2018

Hello,

 

Add !RSA to your ciphers, so it should looks like:

 

TLSv1_2:!SSLv3:!RC4-SHA:!3DES:!DH:!ADH:!EDH:!MD5:!EXPORT:!DES:!RSA:@STRENGTH

 

And us Josh said, you will need to patch your system to mitigate a lot of vulnerabilities on your current version.

 

Regards