Forum Discussion

Versha's avatar
Versha
Icon for Nimbostratus rankNimbostratus
May 14, 2020

Disable ciphers

I wanted to disable cipher " TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" , so i can put DEFAULT:ECDHE:!RSA:!DHE:!3DES!RC4:!TLSv1_1:!TLSv1 in ciphers section. will it work?

 

i got this cipher "DEFAULT:ECDHE:!RSA:!DHE:!3DES" in old questioner to disable " TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" but i wanted to add this as well - DEFAULT:!RC4:!TLSv1_1:!TLSv1 in F5 , so please help me with the correct cipher how can i combine this?

 

BIG-IP
devops
LTM
  • Samir's avatar
    Samir
    Icon for MVP rankMVP
    May 14, 2020

    This is equivalent to

     TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 => ECDHE-RSA-AES256-SHA384

    If you wanted to disable above cipher along with DEFAULT:!RC4:!TLSv1_1:!TLSv1, then try the below ciphers. 

    DEFAULT:!RC4:!TLSv1_1:!TLSv1:!ECDHE-RSA-AES256-SHA384

    Can you share your exact requirement ?