Forum Discussion

Rob_Higginbotha's avatar
Rob_Higginbotha
Icon for Nimbostratus rankNimbostratus
May 17, 2018

Disabling Ciphers

Guys,   We are deploying Skype at work. The Skype team would like me to disable the "Weak" Ciphers and only enable the others. I know you can disable / enable them in the clientssl profile under...
BIG-IP
LTM
security
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    May 18, 2018

    @Rob, Do you want to disable only Weak cipher, which you have pasted in Question section. Let us know.

     

Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent

@Rob, Do you want to disable only Weak cipher, which you have pasted in Question section. Let us know.

 

Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
May 19, 2018

Disable below cipher in-order to eliminate weak cipher list. I have tested in v12 and all weak cipher gone. Suggest you to test in LAB environment and share feedback. Most important thing, don't play with default 

client-ssl
profile which has pointed by @SBlakely

Find the weak cipher list as per above question . 

    AES256-SHA256
    AES128-SHA256
    AES256-SHA
    AES128-SHA
    DES-CBC3-SHA

TLS 1.1 (Weak suites in server-preferred order)

    AES256-SHA
    AES128-SHA
    DES-CBC3-SHA

TLS 1.0 (Weak suites in server-preferred order)

    AES256-SHA
    AES128-SHA
    DES-CBC3-SHA