SSL profile. Ciphers

Of course. Just use the following string in the client SSL profile Ciphers box:

'!SSLv3:AES256-SHA'

It's worth noting here that most SSL stacks will arbitrarily remove portions of what are considered "default" ciphers if they're included in the cipher string. The general rule is:

1. If the key exchange is RSA, do not include RSA in the cipher string

2. If the block cipher mode is CBC, do not include CBC in the cipher string

That then leaves you with AES256-SHA, but that alone is possible in SSLv3 and all of the TLS versions, so we also want to remove SSLv3.

well, currently it looks like that (check attachment) if add this line to cipher lists. On the left with your proposal on the left my current one. can i enable only this one: RSA-AES-256-CBC-SHA ??