For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Robberhines_120's avatar
Robberhines_120
Icon for Nimbostratus rankNimbostratus
Apr 17, 2014

Clarification of Cipher settings

I have been tasked with ensuring that our ciphers are set correctly for PCI compliance. Now our LTM devices have been up and running for a while and were setup by a previous admin.   We are cur...
application delivery
LTM
management
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Apr 18, 2014

you can display cipher suite list using tmm --clientciphers. the following is output from 11.5.1.

[root@ve11a:Active:In Sync] config  tmm --clientciphers 'RC4:!EXP-RC4-MD5:!EXP1024-RC4-SHA'
       ID  SUITE                            BITS PROT    METHOD  CIPHER  MAC     KEYX
 0:     5  RC4-SHA                          128  SSL3    Native  RC4     SHA     RSA
 1:     5  RC4-SHA                          128  TLS1    Native  RC4     SHA     RSA
 2:     5  RC4-SHA                          128  TLS1.1  Native  RC4     SHA     RSA
 3:     5  RC4-SHA                          128  TLS1.2  Native  RC4     SHA     RSA
 4:     4  RC4-MD5                          128  SSL3    Native  RC4     MD5     RSA
 5:     4  RC4-MD5                          128  TLS1    Native  RC4     MD5     RSA
 6:     4  RC4-MD5                          128  TLS1.1  Native  RC4     MD5     RSA
 7:     4  RC4-MD5                          128  TLS1.2  Native  RC4     MD5     RSA