How to disable weaker ciphers in TLS 1.2

Hi Gautam_Venna 

You can use custom cipher string and choose specific ciphers that you want to use. Article given here will help you to understand steps to configure same.

Below is the section under client-ssl profile where you can use custom cipher string 

Also looking at the requirement, you need to disable CBC mode ciphers as those are highlighted as weak. So you need to use custom string which will allow only strong ciphers and with this you should be good.

To test the custom cipher string and see what all cipher will it allow, you can check it on F5 by putting cipher string to be use under below section. This will give you list of ciphers that will get enabled with the given string.

I would recommend you to test it first on your lower enviroments to validate the results.

You can also refer this video to get more idea on it.

Let me know if you still have any doubts on it. Thanks!