For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Versha's avatar
Versha
Icon for Nimbostratus rankNimbostratus
May 14, 2020

Disable ciphers

I wanted to disable cipher " TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" , so i can put DEFAULT:ECDHE:!RSA:!DHE:!3DES!RC4:!TLSv1_1:!TLSv1 in ciphers section. will it work?

 

i got this cipher "DEFAULT:ECDHE:!RSA:!DHE:!3DES" in old questioner to disable " TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" but i wanted to add this as well - DEFAULT:!RC4:!TLSv1_1:!TLSv1 in F5 , so please help me with the correct cipher how can i combine this?

 

BIG-IP
devops
LTM

1 Reply

  • Samir's avatar
    Samir
    Icon for MVP rankMVP
    May 14, 2020

    This is equivalent to

     TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 => ECDHE-RSA-AES256-SHA384

    If you wanted to disable above cipher along with DEFAULT:!RC4:!TLSv1_1:!TLSv1, then try the below ciphers. 

    DEFAULT:!RC4:!TLSv1_1:!TLSv1:!ECDHE-RSA-AES256-SHA384

    Can you share your exact requirement ?