Forum Discussion

SIP_354925's avatar
SIP_354925
Icon for Nimbostratus rankNimbostratus
Jun 17, 2018

Cipher List

I am trying to get a cipher string that changes lines 1 and 2 from ECDHE-RSA to DHE-RSA like shown below. I used the cipher rules and group to arrive at the suite below but cannot get to where I can change lines 1 and 2 to what I need. Any help?

 

DHE-RSA-AES128-SHA and DHE-RSA-AES256-SHA

 

  1. ECDHE-RSA-AES256-CBC-SHA/TLS1.1

  2. ECDHE-RSA-AES128-CBC-SHA/TLS1.1

     

  3. ECDHE-ECDSA-AES256-SHA/TLS1.1

     

  4. ECDHE-ECDSA-AES128-SHA/TLS1.1

     

  5. ECDHE-RSA-AES256-GCM-SHA384/TLS1.2

     

  6. ECDHE-RSA-AES256-SHA384/TLS1.2
  7. ECDHE-ECDSA-AES256-GCM-SHA384/TLS1.2
  8. ECDHE-ECDSA-AES256-SHA384/TLS1.2
  9. ECDHE-ECDSA-AES128-SHA256/TLS1.2
  10. ECDHE-ECDSA-AES128-GCM-SHA256/TLS1.2
  11. ECDHE-RSA-AES128-SHA256/TLS1.2
  12. ECDHE-RSA-AES128-GCM-SHA256/TLS1.2
ASM Advanced WAF
security
  • AceDawg1's avatar
    AceDawg1
    Icon for Nimbostratus rankNimbostratus
    Jun 17, 2018

    Can you include the text or a screenshot of the cipher rule that generated this list?

     

  • SIP_354925's avatar
    SIP_354925
    Icon for Nimbostratus rankNimbostratus
    Jun 18, 2018

    The two rules that I used

     

    DEFAULT:+SHA:-TLSv1_2:-TLSv1:-DTLSv1 and DEFAULT:+SHA256:+SHA384:-TLSv1_1:-TLSv1:-SHA

     

  • AceDawg1's avatar
    AceDawg1
    Icon for Nimbostratus rankNimbostratus
    Jun 18, 2018

    Any reason you can't create a custom cipher rule and manually enter the cipher strings in the order you need:

    ECDHE-RSA-AES128-CBC-SHA:ECDHE-RSA-AES256-CBC-SHA:ECDHE-ECDSA-AES256-SHA:ECDHE-ECDSA-AES128-SHA...
  • SIP_354925's avatar
    SIP_354925
    Icon for Nimbostratus rankNimbostratus
    Jul 16, 2018

    Thank you. I did not realize that ciphers can be added in that manner.