Forum Discussion
shaikhzaid
Feb 13, 2023Altocumulus
TLS/SSL weak messgae auth on code cipher suites
hello, i have received a vulnerability for our published services for the subject weak ciphers. Cipher suites: DEFAULT:!DHE:!RSA:!DES:!3DES is configured with TLSv1.2 enabled. How to resolve any h...
mihaic
Feb 13, 2023MVP
you could use this:
DEFAULT:!DHE:!RSA:!DES:!3DES@STRENGTH
it will order SSL ciphers by strength
https://support.f5.com/csp/article/K13171
then you have to see which ciphers appear to be weak when you scan your virtual server using qualis
https://www.ssllabs.com/ssltest/
And then remove them just like you removed 3DES for example ,
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects