For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Moinul_Rony's avatar
Moinul_Rony
Icon for Altostratus rankAltostratus
Sep 04, 2014

How to disable CIPHER for and Disable TCP time stamp on F5 ?

Hi, We have just being chased by PCI Compliance about having vulnerabily that detected WEAK CIPHER support and TCP Timestamp being turned ON. --Report say our application: Negotiated with the fol...
application delivery
devops
iRules
J_48024's avatar
J_48024
Icon for Nimbostratus rankNimbostratus
Jul 08, 2015

After lots of trials and error the following strings works for me. Citrix web interface though worked with other strings but Citrix Receiver was taking tooo long to "negotiation capabilities" ; with below string - everything is within acceptable limits..

 

TLSv1_2:TLSv1_1:TLSv1:@STRENGTH:!MD5:!EXPORT:!DES:!DHE:!EDH:!RC4:!ADH