For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

aboulleill_3013's avatar
aboulleill_3013
Icon for Nimbostratus rankNimbostratus
Dec 08, 2017

stop cipher TLS_DH_anon_WITH_AES_128_GCM_SHA256

Dears,   Please advise how can I stop this cipher from SSL profile Im not using default instead im using only 'TLSv1_2'   Thanks  
application delivery
BIG-IP
LTM
security
Ashwin_Venkat's avatar
Ashwin_Venkat
Icon for Employee rankEmployee
Dec 14, 2017

Simply appending :!ADH (as mentioned above) should allow for disabling Anonymous DH cipher suites. Moreover, I'd also recommend disabling some of the other known weaker ones that are enabled for your cipher string like RC4, DES, 3DES (Sweet32). Therefore, a cipher string like 'TLSv1_2:!ADH:!DES:!3DES:!RC4' (without the quotes) is a great start.