For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

daveferrier_202's avatar
daveferrier_202
Icon for Nimbostratus rankNimbostratus
Feb 25, 2019

how to prioritize cipher suites

I am running version LTM BIGIP 12.1.3.5 and confused as to how to prioritize cipher suites.   I am using this cipher string on some client and server side ssl profiles. DEFAULT:@STRENGTH:!3DES:!EX...
BIG-IP
LTM
security
RaghavendraSY's avatar
RaghavendraSY
Icon for Altostratus rankAltostratus
Feb 25, 2019

Yes. Please refer below article:

 

https://devcentral.f5.com/articles/ssl-profiles-part-4-cipher-suites

 

“!” – these ciphers are permanently deleted from the list and cannot reappear in the list even if explicitly stated.

 

“-“ - these ciphers are deleted from the list but can be re-added by later options.

 

“+” – these ciphers are moved to the end of the list.