For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Brian_Dean's avatar
Brian_Dean
Icon for Nimbostratus rankNimbostratus
Jun 29, 2015

SSL Client Profile Cipher Suites

I'm working on a project to re-order the client-side cipher suites on phases. Here is the ssl client profiles base configuraiton:   -ALL:!ADH:!LOW:!EXP:!SSLv2:!NULL:RC4:RSA:HIGH:MEDIUM   We ca...
application delivery
design
LTM
security
Brian_Dean's avatar
Brian_Dean
Icon for Nimbostratus rankNimbostratus
Jun 29, 2015

That was it. And likewise changing the whole string to the following is exactly what we are looking for, for now.

 

!ADH:!LOW:!EXP:!NULL:!SSLv3:!DTLSv1:HIGH+TLSv1_2:HIGH+TLSv1_1:HIGH+TLSv1:MEDIUM+TLSv1_2:MEDIUM+TLSv1_1:MEDIUM+TLSv1:!DHE-RSA-AES256-GCM-SHA384:!DHE-RSA-AES256-SHA:!DHE-RSA-DES-CBC3-SHA:!DHE-RSA-AES128-GCM-SHA256:!DHE-RSA-AES128-SHA:RC4

 

Thank you very much Stefan. I am truly grateful.