Forum Discussion
shaikhzaid
Altocumulus
AltocumulusTLS/SSL weak messgae auth on code cipher suites
hello,
i have received a vulnerability for our published services for the subject weak ciphers.
Cipher suites: DEFAULT:!DHE:!RSA:!DES:!3DES is configured with TLSv1.2 enabled.
How to resolve any help would be appreciated.
Thanks
1 Reply
- mihaic
MVP
you could use this:
DEFAULT:!DHE:!RSA:!DES:!3DES@STRENGTH
it will order SSL ciphers by strength
https://support.f5.com/csp/article/K13171
then you have to see which ciphers appear to be weak when you scan your virtual server using qualis
https://www.ssllabs.com/ssltest/
And then remove them just like you removed 3DES for example ,
