BigIP 11.6 HF4 + SSL ciphers

This is an OLD discussion I know. I stumbled upon it by accident and thought to share my 2 cents.

I use this

ECDHE:DEFAULT:!DHE

simple cipher-suite string to get an A+ rating, with only the IE6/XP combination failing to connect (as it has no support for the TLS protocol).

What this cipher-suite string essentially does (over the default) is bring to front the ECDHE ciphers and dumps the DHE ciphers.