Forum Discussion

Nimbostratus

Mar 02, 2015

The best ciphersuite

Hi We host several virtual servers on our LTM and assign SSL profiles to them with certain ciphersuites, I wish to improve them. My question is, can anyone suggest an appropriate cipher suite to ...

Nimbostratus

In 11.4.x code (https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html

Brad_Parker

Cirrus

Mar 02, 2015

That is false, the vulnerability to Poodle TLS has been patched in all versions back to 10.2.4. AES-GCM is not required to mitigate this vulnerability. https://support.f5.com/kb/en-us/solutions/public/15000/800/sol15882.html

Recent Discussions

Under Attack? F5 Will Help You.
Contacting F5 Support?

DevCentral Quicklinks

* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com

Discover DevCentral Connects

* Podcasts
* Social Channels
* Video Streaming

Forum Discussion

The best ciphersuite

Recent Discussions

F5 looses the token for the first call

ports are showing open on online scanning tool

self-directed requests fail because of no certificate

Decode ObjectSID from Base64-encode string

iRule - Url rewrite and header replace and pool selection not working

Related Content

F5 ciphersuite syntax

SSL ciphersuite to allow only TLS

OpenSSL SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG Session Resume Ciphersuite Downgrade Weakness

Re: CVE-2014-3566: Removing SSLv3 from BIG-IP

Re: iRule to stop SSLv3 connections

ABOUT DEVCENTRAL

RESOURCES

SUPPORT

PARTNERS