Forum Discussion
John_Ogle_45372
Nimbostratus
NimbostratusExample cipher suite needed...
I am running a box in our lab that is running 11.5.3. We have some very old Vista clients that need to access to two SSL VIPs. I need to use a cipher string that will support these ciphers below. I ...
Hannes_RappNimbostratus
NimbostratusI don't think you will need RC4. If you can test, give a try to
ALL:!EXPORT:!RC4:!DES:!ADH:!EDH:!SSLv3-This SSL/TLS config also complies with PCI DSS 3.0 (Enforced till the end of June 2016)
Although the string above qualifies for grade A in Qualys SSL labs, it's not perfect from a security standpoint. Windows Vista and XP clients on IE8 and newer can connect using TLS1.0 in combination with CBC.
