For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pascal_Tene_910's avatar
Pascal_Tene_910
Historic F5 Account
Apr 18, 2014

You just need to configure the SSL profile so that it only uses Diffie–Hellman based key exchange. Any cipher suite that include DH, DHE or ECDHE will do the job.

 

The following sulution gives indications on how to remove unwanted ciphers from the profile.

 

http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13171.html?sr=36739985

 

Make sure you don't use RSA for key exchange as it is does not provide PFS.