Hardening

This solution has the explanation and steps:

 

https://support.f5.com/csp/article/K17370

 

Hello,

 

Instead of listing all ciphers that you want to allow. It may be simpler to accept except those that are weak.

 

Example: To remove all AES128-SHA ciphers you can use the following format.

 

DEFAULT:!AES128-SHA

 

You can consult the list of ciphers included in the DEFAULT for your BIG IP version here :

 

https://support.f5.com/csp/article/K13156

 

Hope it helps

 

Regards