Forum Discussion

Danny_Arroyo's avatar
Danny_Arroyo
Icon for Cirrus rankCirrus
Apr 19, 2018

Enabling "Honor Cipher Order" on F5 LTM v12.X

Our SSL sites are receiving F's on ssllabs. The main reason is that we are vulnerable to the ROBOT vulnerability (We are upgrading from 12.1.1 to 12.1.3.4 tonight).   However another issue we ...
application delivery
BIG-IP
LTM
security
Danny_Arroyo's avatar
Danny_Arroyo
Icon for Cirrus rankCirrus
Apr 23, 2018

Thanks I'll try that.

 

But does that command change the cipher for all my VS's? Is there some way to test this cipher with only one VS before I apply this to all my VS's?

 

Also, when I use this command, do I uncheck the "Ciphers" option in my individual client ssl profiles so that any custom setting in there does not affect the negotiation?