SSL Profiles and Strength

Thanks for the links, that was good information and it validated some of what I've been doing. I had already augmented the ciphers to block some that I didn't want to support. Essentially, for strength I've blocked low and still support Medium and High.

 

 

As I read that post, it appears that the BigIP will 'support' the medium and high ciphers. Is there a way I can order the ciphers so that if the client supports high it uses it? Perhaps this is something that has to be done with an iRule, changing the VS or profile based on the capability of the client? Directing the client to the profile that supports ONLY high if they can support it.

 

 

This is not for the config utility by the way, but thanks for offering that up.