Forum Discussion
bkhowson
Nimbostratus
NimbostratusSSLLabs A+, F5 LTM 11.4
We are testing a configuration to achieve an A+ grade on the SSLLabs.com server test.
The "DEFAULT" ciphers is documented in sol13156 and sol13171.
DEFAULT = NATIVE:!MD5:!EXPORT:!DES:!DHE:...
Yann_Desmarest
Cirrus
CirrusI personally use those ciphers (11.5+) :
DEFAULT:!RC4:ECDHE:AES-GCM:!AES128-GCM-SHA256:!AES256-GCM-SHA384:!ADH-AES256-GCM-SHA384:!ADH-AES128-GCM-SHA256:!AES256-SHA256:!AES256-SHA:@STRENGTHI disable Renegociation on Client SSL Profile
and add HSTS irule using an irule
