Forum Discussion
johnestate_1382
Nimbostratus
NimbostratusiRule for redirecting 128bit RC4-md5 and 128bit RC4-SHA to webpage
Hello
I have been asked to deny or block 128bit RC4-md5 and 128bit RC4-SHA user reqeust, so I wrote following iRule
when HTTP_REQUEST {
log local0. "VIP connection request before if statem...
Lee_Payne_53457
Cirrostratus
CirrostratusIf you want to block 128bit RC4-md5 & RC4-SHA you can modify the cipher suite in the client SSL profile to something like:
DEFAULT:!RC4-SHA:!RC4-MD5
Which should allow all the default ciphers but also block those two, it's also worth knowing that MD5 ciphers are blocked in the default cipher list in v10.2 and higher.
