Forum Discussion

Sriram_Shanmuga's avatar
Sriram_Shanmuga
Icon for Altostratus rankAltostratus
Oct 03, 2018

How to disable weak cipher from Client SSL Profile

Hi, We have disabled few ciphers and we have rating "A" in qualys ssl checker portal. We have a requirement to disable weak ciphers as well.   Could some one advice how to disable weak ciphers. Pl...
ASM Advanced WAF
security
  • Lokesh_R_365525's avatar
    Lokesh_R_365525
    Oct 03, 2018

    By using DEFAULT:@STRENGTH command you can preferred the ciphers to use only Strength.

     

Sriram_Shanmuga's avatar
Sriram_Shanmuga
Icon for Altostratus rankAltostratus
Oct 04, 2018

Hi Kaustubh,

 

After the change the TLS 1.0,1.1 was enabled.

 

Our requirement is to have TLS 1.2 alone and rest all protocols should be disable.

 

Please suggest a cipher for this requirement.