For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

stephen_piskor_'s avatar
stephen_piskor_
Icon for Nimbostratus rankNimbostratus
Sep 07, 2017

Disable Specific SSL Ciphers on F5 Big IP

Hi,   F5 novice here. Due to the results of a recent pentest I need to disable 3DES and RC4 ciphers on our F5 Big IP running 12.1.   I have been able to edit the existing ciphers and successful...
BIG-IP
security
stephen_piskor_'s avatar
stephen_piskor_
Icon for Nimbostratus rankNimbostratus
Sep 07, 2017

All sorted.

 

I add this entire string in the client SSL profile Ciphers option. Thanks for all your help everyone.

 

QUALYS now reporting an A !

 

!SSLv2:!EXPORT:!DHE+AES-GCM:!DHE+AES:!DHE+3DES:ECDHE+AES-GCM:ECDHE+AES:RSA+AES-GCM:RSA+AES:ECDHE+3DES:RSA+3DES:-MD5:-SSLv3:-RC4

 

  • Snl's avatar
    Snl
    Icon for Cirrostratus rankCirrostratus
    Sep 07, 2017

    good to know your issue resolved