Forum Discussion

AICadmin_2415's avatar
AICadmin_2415
Icon for Nimbostratus rankNimbostratus
Apr 11, 2017

How to view which ciphers my ssl profile supports?

A recent vulnerability scan found that I am supporting for following weak ciphers:

 

ECDHE-RSA-DES-CBC3-SHA DES-CBC3-SHA

 

I have just disabled them in my SSL Client 'clientssl' profile which is the parent profile for my other SSL profiles using string:

 

DEFAULT:!SSLv3:!RC4:!DHE:!DES-CBC3-SHA:!ECDHE-RSA-DES-CBC3-SHA

 

What is the TMM command that I can run to see which ciphers are now support by the 'clientssl' profile or other child profiles? I've run the tmm --clientciphers DEFAULT command but I want to see what I am still support if that is possible before I re-run the scan.

 

Thanks in advance!

 

LTM
security
TMSH
  • CharlesCS's avatar
    CharlesCS
    Icon for Cirrus rankCirrus
    Apr 11, 2017

    Use the "tmm --clientciphers" command, and as its operand enclose the clientssl profile's cipher string in single-quotes:

    tmm --clientciphers 'DEFAULT:!SSLv3:!RC4:!DHE:!DES-CBC3-SHA:!ECDHE-RSA-DES-CBC3-SHA'