Disable DHE Ciphers - SSL Parent Profile

F5 recommends that you do not modify a default profile (like the serverssl profile).

What you should do is create a new site-default server-ssl profile, and change the Parent Profile on all your existing server-ssl profiles to this new site-default profile.

Then (in future) is you need to modify a setting on all your server-ssl profiles, you can make that change on your site-default profile and pass it to all the child profiles.

You can override an inherited option in a child profile by setting the custom checkbox for a specific option.