Forum Discussion

Rob_Higginbotha's avatar
Rob_Higginbotha
Icon for Nimbostratus rankNimbostratus
May 17, 2018

Disabling Ciphers

Guys,   We are deploying Skype at work. The Skype team would like me to disable the "Weak" Ciphers and only enable the others. I know you can disable / enable them in the clientssl profile under...
BIG-IP
LTM
security
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    May 18, 2018

    @Rob, Do you want to disable only Weak cipher, which you have pasted in Question section. Let us know.

     

Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
May 18, 2018

Yes, you need to set this in the clientSSL profile applied to the virtual.

 

You can also create a clientssl profile that specifies your selected ciphers, and use that profile as the parent profile for the Virtual server specific clientssl profiles. Then if you need to change the ciphers set for all your virtuals, you can update the parent and change all the child profiles at once.

 

Do NOT modify the default clientSSL profile