Forum Discussion
aboulleill_3013
Nimbostratus
Nimbostratusstop cipher TLS_DH_anon_WITH_AES_128_GCM_SHA256
Dears,
Please advise how can I stop this cipher from SSL profile
Im not using default instead im using only 'TLSv1_2'
Thanks
Ashwin_Venkat
Employee
EmployeeSimply appending :!ADH (as mentioned above) should allow for disabling Anonymous DH cipher suites. Moreover, I'd also recommend disabling some of the other known weaker ones that are enabled for your cipher string like RC4, DES, 3DES (Sweet32). Therefore, a cipher string like 'TLSv1_2:!ADH:!DES:!3DES:!RC4' (without the quotes) is a great start.
