Forum Discussion

Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Oct 21, 2016

Remove cipher from SSL profile.

Hi Experts, Can you please help to remove below cipher from SSL profile. V11.4   TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384   TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256   TLS_ECDHE_RSA_WITH_AES_256_CB...
application delivery
BIG-IP
LTM
security
Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Oct 21, 2016

Try something like this in the cipher: 

!ECDH+AESGCM:!ECDH+AES256
for the relevant ciphers that you don't want to use.

However, I would recommend the other way around, given the length of the ciphers that you are trying to avoid, why don't you identify the ciphers that you want to use and just allow them.

See SOL13171 for cipher strings.