F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Johnde's avatar
Johnde
Icon for Cirrus rankCirrus
Apr 01, 2020
Solved

Ciphers for restricting traffic to TLS1.2

Hello team,   We want to disable all the lower TLS/SSL versions like SSLv3, TLS1.0 and TLS1.2 under client SSL profiles. I know i can easily do it through options list by enabling no SSLv3 etc. I...
BIG-IP
LTM
security
ssl
  • Mayur_Sutare's avatar
    Mayur_Sutare
    Apr 01, 2020

    Please try below string.

     

    ALL:!DHE:!ADH:!EXPORT:!SSLv2:!EXPORT40:!EXP:!LOW:!RC4:!SSLv3:!MEDIUM:!3DES:!RSA:!TLSv1:!TLSv1_1

     

    I've used this in my setup and it is working as expected. Hope it helps you too.

     

    Mayur

Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Apr 01, 2020

Please try below string.

 

ALL:!DHE:!ADH:!EXPORT:!SSLv2:!EXPORT40:!EXP:!LOW:!RC4:!SSLv3:!MEDIUM:!3DES:!RSA:!TLSv1:!TLSv1_1

 

I've used this in my setup and it is working as expected. Hope it helps you too.

 

Mayur

  • Johnde's avatar
    Johnde
    Icon for Cirrus rankCirrus
    Apr 01, 2020

    It worked as per expectations man. Thanks a lot!