For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swapnil_89332's avatar
swapnil_89332
Icon for Nimbostratus rankNimbostratus
Sep 10, 2015

Need help in setting strong Cipher string

Hello,   We have a request to set cipher suite on F5 LBs that includes following. Can someone suggest correct string that should be used to achieve this ? Also let me know if it can be set to all ...
JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP
Sep 17, 2015

Mozilla's wiki lists several "strong" cipher lists for various platforms including the BIG-IP. I loaded their example into a unit running 11.6.0 HF5 and Qualys SSL Labs scores it at an A rating. You'd need to add HSTS to the virtual server in order to get that A+, I believe.

 

https://wiki.mozilla.org/Security/Server_Side_TLSF5_BIG-IP