Cipher Suites to Mitigate against Vulnerabilities

Hi,

https://devcentral.f5.com/articles/cve-2014-3566-poodle-vs-cve-2014-8730-tls-poodle

https://devcentral.f5.com/questions/beast-attack

First of all - have you got the latest Hotfix for 10.2.1?

Also note that some SSL-related vulnerabilities were only patched in SSL profiles starting from v10.2.4...

Check out these articles:

https://devcentral.f5.com/articles/cve-2014-3566-poodle-vs-cve-2014-8730-tls-poodle

https://devcentral.f5.com/articles/cve-2014-3566-poodle-vs-cve-2014-8730-tls-poodle

You can check how good your cipher config is using the SSL Labs test your websites: https://www.ssllabs.com/ssltest/

Hope this helps,

Sam

Sorry, not possible in v10.2.1 without the use of iRules. Can you upgrade the box to v10.2.4? If yes, I can share a cipher string which will give you a "B" rating in Qualys SSL Labs (this is the max you can get in v10).