Forum Discussion
Robert_Roman_14
Nimbostratus
NimbostratusNew Cipher for TLS1.x Padding Vulnerability
Currently, we have our client ssl profile set with the following cipher string:
!SSLv3:!SSLv2:ALL:!DH:!ADH:!EDH:!MD5:!EXPORT:!DES:@SPEED
We have been tasked by our infoSec department to correct ...
Brad_Parker
Cirrus
CirrusThe POODLE vulnerability is only for CBC ciphers. '!SSLv3:RC4-SHA' would result in only RC4 ciphers and exclude SSLv3 which will cover the POODLE vulnerability. The only other issue with this is RC4 is also consider to be weak and soon to be considered insecure. I would recommend upgrading whenever you can to 11.5+ to get access to newer and string cipher such as GCM.
