Forum Discussion

swapnil_89332's avatar
swapnil_89332
Icon for Nimbostratus rankNimbostratus
Sep 10, 2015

Need help in setting strong Cipher string

Hello,   We have a request to set cipher suite on F5 LBs that includes following. Can someone suggest correct string that should be used to achieve this ? Also let me know if it can be set to all ...
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Sep 10, 2015

The very first q to ask is - what version are you running? Are you trying to influence the ciphers used by TMM clientssl/serverssl? Or the ciphers used by the management GUI? What you've listed is the ciphers used by management GUI, not TMM SSL profiles

 

The short answer for the TMM profile can be found here http://mikeboylan.com/2014/05/02/f5-perfect-forward-secrecy/. I'm pretty sure that this will cover most if not all your requirements. Just add !RC4 onto the end of the string he gives.

 

You'll also want to order a SHA-2 SSL certificate to meet that requirement. All the major CAs issue these now.