Forum Discussion

swapnil_89332's avatar
swapnil_89332
Icon for Nimbostratus rankNimbostratus
Sep 10, 2015

Need help in setting strong Cipher string

Hello,   We have a request to set cipher suite on F5 LBs that includes following. Can someone suggest correct string that should be used to achieve this ? Also let me know if it can be set to all ...
IheartF5_45022's avatar
IheartF5_45022
Icon for Nacreous rankNacreous
Sep 16, 2015

Oh dear I'm afraid I didn't read your response correctly and didn't notice 10.2.4. Yes you are pretty much screwed there re PFS - the best you can do is a SHA-2 cert with the following cipher string;- 

ciphers "DEFAULT:!SSLv3:!RC4"

which will get you (currently) an A- on Qualys/SSL Labs (as long as you also insert Strict-Transport-Security header in HTTP responses) , and all your requirements above EXCEPT PFS.