Forum Discussion

Godswill_Aliagh's avatar
Godswill_Aliagh
Icon for Nimbostratus rankNimbostratus
Nov 08, 2018

Need help to understand what the default ssl client ciphers includes and how to make changes to it.

I have a website that the owner want me to set the ssl client profile to “Cihper Suites - HIGH:!aNULL:!MD5 TLS – TLSv1.0, TLSv1.1, and TLSv1.2.” I am wondering if the default ssl client profile include the requested requirement and if the default ssl client do not include them, how do I configure them

 

BIG-IP
LTM
security
  • Lee_Sutcliffe's avatar
    Lee_Sutcliffe
    Icon for Nacreous rankNacreous
    Nov 08, 2018

    The default ciphers can change from version to version. Cipher suites are taken out as they are deemed weak or vulnerable by F5

    You can check what ciphers are included by default by running the following command in the bash shell

    tmm --clientciphers DEFAULT