Forum Discussion
NimbostratusCiphers and F5
We have recently been doing a lot of auditing which includes choosing TLS and ciphers that meet the criteria of our security team. I have a handle on the TLS but do I need to specific ciphers? If I am on the latest, or recent code, does F5 still hand out weak ciphers? If so, how to I identify what I should be allowing and how to nail it down to those? This isnt one of my strong areas, so I have been looking at all the articles online. But I am not sure what is safe and what isnt.
Jim
Dario_GarridoNoctilucent
Hello.
This article will clarify all your doubts
https://devcentral.f5.com/s/feed/0D51T00006aEjM9SAK
Let me know if not.
KR,
Dario.
- Dario_Garrido
BTW, that's the platform for testing your server
https://www.ssllabs.com/ssltest/
Here there is some extra info
https://devcentral.f5.com/s/feed/0D51T00006i7gqcSAA
- jwlarger
Cirrus
It is a deep rabbit hole to dive down. I recommend
https://devcentral.f5.com/s/articles/cipher-suite-practices-and-pitfalls-25564
There are also several good lightboard lessons.