For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aviv's avatar
Aviv
Icon for Cirrus rankCirrus
Jul 12, 2015

SSL Ciphers

Hi!   i have big-ip 11.5.1   according to ssllabs.com test i need to config only this ciphers on ssl profile :   TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 112 TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 1...
application delivery
ASM Advanced WAF
LTM
security
TMSH
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 15, 2015

Unfortunately you're best bet is probably to patch. Any workaround cipher string will severely limit access to older clients. On an 11.6.0 box the DEFAULT stack should get you a B.

Did you try the first cipher string?

!SSLv3:!EXPORT:RSA+AES:RSA+AES-GCM:ECDHE+3DES:@strength