How to limit what cipher suites are available in v11.4

Check out this Solution Article:

 

K13171: Configuring the cipher strength for SSL profiles (11.x)

 

Hi,

 

Did you check this article:

 

https://support.f5.com/csp/article/K13171

 

you can limit ssl/tls and cipher suites using "Ciphers" options in your SSL client profile. You can Specifies the list of ciphers that the system supports. The default cipher list is DEFAULT.

 

Example: !SSLv2:!EXPORT:!DHE+AES-GCM:!DHE+AES:ECDHE+AES-GCM:ECDHE+AES:RSA+AES-GCM:RSA+AES:-MD5:-SSLv3:-RC4:!3DES

 

let me now if you need more details.

 

regards,