Forum Discussion

Nimbostratus

Sep 10, 2015

Need help in setting strong Cipher string

Hello, We have a request to set cipher suite on F5 LBs that includes following. Can someone suggest correct string that should be used to achieve this ? Also let me know if it can be set to all ...

JoshBecigneul

MVP

Sep 17, 2015

Mozilla's wiki lists several "strong" cipher lists for various platforms including the BIG-IP. I loaded their example into a unit running 11.6.0 HF5 and Qualys SSL Labs scores it at an A rating. You'd need to add HSTS to the virtual server in order to get that A+, I believe.

https://wiki.mozilla.org/Security/Server_Side_TLSF5_BIG-IP