Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

stephen_piskor_'s avatar
stephen_piskor_
Icon for Nimbostratus rankNimbostratus
8 years ago

Disable Specific SSL Ciphers on F5 Big IP

Hi,   F5 novice here. Due to the results of a recent pentest I need to disable 3DES and RC4 ciphers on our F5 Big IP running 12.1.   I have been able to edit the existing ciphers and successful...
big-ip
security
pponte's avatar
pponte
Icon for Altostratus rankAltostratus
8 years ago

I think you could read these links.

 

link 1 link 2

 

You can order the list to make it as you like, e.g: ciphers DEFAULT:RSA+AES-GCM:RSA+AES:@STRENGTH

 

I hope it helps

 

stephen_piskor_'s avatar
stephen_piskor_
Icon for Nimbostratus rankNimbostratus
8 years ago

Ok I just added this..

 

This has helped a great deal.

 

DEFAULT:!DHE