For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Tabish_Mirza_12's avatar
Tabish_Mirza_12
Icon for Nimbostratus rankNimbostratus
Jul 02, 2017

How to disable weak cipher from Client SSL Profile. (TLS_DHE_RSA_WITH_AES_128_CBC_SHA(0x33))

Hi Folks,   We are running BIG-IP LTM 12.1.1. We have already disabled the weak cipher from the Client SSL Profile but still getting Weak Cipher Qualys SSL-Labs rating.   Currently we are havin...
application delivery
LTM
Morten_Marstran's avatar
Morten_Marstran
Icon for Nimbostratus rankNimbostratus
Jul 02, 2017

Hi,

Not sure if this answers your question, but if you seek to score as high as possible on ssl-labs, you should use these ciphers:

ecdhe:rsa:!sslv3:!rc4:!exp:!des:!3des

It will get you an "A" score.

Regards,

Morten