Forum Discussion
NimbostratusHow to prioritize cipher suites on F5
Can i prioritize the cipher suites in the ssl profile. For example if I have the following 4 cipher suites, how do I arrange them based on priority. I want them in following order where 1 is the highest priority and 4 is the lowest?
1 - RSA_WITH_RC4_128_SHA 2 - RSA_WITH_AES_256_CBC_SHA 3 - RSA_WITH_AES_128_CBC_SHA 4 - RSA_WITH_3DES_EDE_CBC_SHA
22 Replies
Yes you can. Just add them from left to right, just like you've done. You can find the "short names" here:
https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html
/Patrik
A tip is to set up a virtual server for testing and test with Qualys SSL labs. Then you can see the browser compatibility.
/Patrik
The last one should be DES-CBC3-SHA.
"!" means that you DON'T want the cipher in the list and you separate each cipher with a ":".
Here's a ok, if a bit outdated article about cipher strings:
https://devcentral.f5.com/articles/ssl-profiles-part-4-cipher-suites
/Patrik
