Cipher string mismatch ??

Bear in mind that the clientssl profile is only half of the equation. Your client must also support the requested ciphers. If you take a packet capture, your client will send a client_hello informing the remote system (the BigIP in this instance) which ciphers and SSL versions (or TLS versions, more likely) it supports. The ciphers will be listed in order of preference.

The Server will then select a cipher from the list offered and proceed. If your client says it only supports a couple of the ciphers you've configured the BigIP to support, then it will never select the others. By the same token, if if offers the client's preferred cipher, it may never offer any of the others.

As such it is perfectly normal for the BigIP not to use all the selected ciphers. Now if you have a client that supports some of our chosen ciphers and we are refusing to initiate a connection due to unsupported ciphers, that's a different problem.

In either case a packet capture should help you get to the bottom of things.