For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Noel_C__180670's avatar
Noel_C__180670
Icon for Nimbostratus rankNimbostratus
Dec 20, 2014

TLS1.x Padding Vulnerability Workaround and EAS

Hello, I'd like to employ the workaround described in SOL15882 where I'll have to create a custom cipher string using RC4-SHA ciphers. The SOL states "clients that do not support the RC4-SHA cipher ...
application delivery
LTM
management
security
TMSH
boneyard's avatar
boneyard
Icon for MVP rankMVP
Dec 24, 2014

i agree with Brad, i would expect RC4 to be pretty broadly supported. but do remember that using RC4 is not advised by a large group and i suspect the support is going to go away pretty soon.

 

so plan that upgrade sooner then later.