For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aviv's avatar
Aviv
Icon for Cirrus rankCirrus
11 years ago

SSL Ciphers

Hi!   i have big-ip 11.5.1   according to ssllabs.com test i need to config only this ciphers on ssl profile :   TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 112 TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 1...
application delivery
ASM Advanced WAF
LTM
security
TMSH
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
11 years ago

This should get you what you need:

!SSLv3:!EXPORT:RSA+AES:RSA+AES-GCM:ECDHE+3DES:@strength

Which produces the following cipher list:

AES256-SHA256                    256  TLS1.2  Native  AES       SHA256  RSA       
AES256-SHA                       256  TLS1    Native  AES       SHA     RSA       
AES256-SHA                       256  TLS1.1  Native  AES       SHA     RSA       
AES256-SHA                       256  TLS1.2  Native  AES       SHA     RSA       
AES256-SHA                       256  DTLS1   Native  AES       SHA     RSA       
AES256-GCM-SHA384                256  TLS1.2  Native  AES-GCM   SHA384  RSA       
ECDHE-RSA-DES-CBC3-SHA           192  TLS1    Native  DES       SHA     ECDHE_RSA 
ECDHE-RSA-DES-CBC3-SHA           192  TLS1.1  Native  DES       SHA     ECDHE_RSA 
ECDHE-RSA-DES-CBC3-SHA           192  TLS1.2  Native  DES       SHA     ECDHE_RSA 
AES128-SHA256                    128  TLS1.2  Native  AES       SHA256  RSA       
AES128-SHA                       128  TLS1    Native  AES       SHA     RSA       
AES128-SHA                       128  TLS1.1  Native  AES       SHA     RSA       
AES128-SHA                       128  TLS1.2  Native  AES       SHA     RSA       
AES128-SHA                       128  DTLS1   Native  AES       SHA     RSA       
AES128-GCM-SHA256                128  TLS1.2  Native  AES-GCM   SHA256  RSA