Imperva Transparent Inspection = Unique Cipher Requirements

Has anyone deployed Imperva in bridge or transparent mode with an F5 SSL offloaded site behind it? Have you dealt with the requirement that Imperva can't use DHE or EC ciphers? I'd like to create a client SSL profile that can be re-used and ensure that SSL inspection is happening always in Imperva.

 

They provide some guidance for Apache and Tomcat, but I can't seem to find the right cipher string for F5.

 

Recommended for Apache: ALL: !ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!NULL:!aNULL:!eNULL:!EDH:!RC4-SHA

 

Recommended for Tomcat: ciphers=" SSL_RSA_WITH_RC4_128_MD5, SSL_RSA_WITH_RC4_128_SHA, TLS_RSA_WITH_AES_128_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA , SSL_RSA_WITH_DES_CBC_SHA, SSL_RSA_EXPORT_WITH_RC4_40_MD5 , SSL_RSA_EXPORT_WITH_DES40_CBC_SHA

 

I've tried stuff like... DEFAULT:!SSLv3:!DHE:!EDH:!ECDHE

 

But I just can't get the right cipher statement that disables these ciphers.

 

Any help would be greatly appreciated!