SSL/TLS use of weak RC4 cipher

Does:!SSLv3:!RC4 help?

 

N

 

if YOUR ASKING ABOUT THE MANAGEMENT INTERFACE THIS MIGHT WORK AND I USE IT ON MY LTMS. this string seems to be good and only supports TLS1.2 ciphers .

 

modify sys httpd ssl-ciphersuite NONE:DHE-RSA-AES256-SHA:AES256-SHA Save sys config

 

!SSLv3:RC4-SHA

- What this means? Do not permit a combination of SSLv3 and RC4-SHA cipher suite. This does not tell that RC4-SHA is prohibited for TLS1.0, TLS1.1 or TLS1.2. That's why your issue prevails.

Maybe you can review this article that talks about what an affective cipher list looks like -

 

SSL cipher settings

 

Or this solution article on how to view the affective cipher suite lists on the BIG-IP:

 

SOL15194: Overview of the BIG-IP SSL/TLS cipher suite

 

Or this article:

 

SOL13171: Configuring the cipher strength for SSL profiles (11.x)