Forum Discussion
Gdiaz_368896
Nimbostratus
Nimbostratusforward secrecy BIGIP 10.2.4
Hello
I'm running BIG-IP 10.2.4 and I was wondering how to support forward secrecy. My grade on ssllabs is capped at B because of that.
Thanks
2 Replies
10.2.4 is too old. It contains old ciphers only. PFS ciphers are DHE or ECDHE They are not supported on 10.2.4
https://support.f5.com/csp/article/K11444
https://support.f5.com/csp/article/K10262You need to upgrade you box to the version which has DHE or ECDHE ciphers support
https://support.f5.com/csp/article/K13163
Simon_BlakelyEmployee
10.2.4 does not support any ciphers that support Perfect Forward Secrecy
You need to upgrade to a more recent version.K11444: SSL ciphers supported on BIG-IP platforms (10.x)
