For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

S_Meulmeester's avatar
S_Meulmeester
Icon for Cirrus rankCirrus
Sep 11, 2019

Vulnerability SSL Medium Strength Cipher Suites Supported

From the PCI audit I get the following: Vulnerability SSL Medium Strength Cipher Suites Supported Currently the following is configured: list sys httpd sys httpd {     auth-pam-idle-timeout 2400 ...
BIG-IP
LTM
security
S_Meulmeester's avatar
S_Meulmeester
Icon for Cirrus rankCirrus
Sep 11, 2019

​Hi, I confirm it is the management interface  so would the following configuration solve the problem of Medium Strength Cipher Suites " modify /sys httpd ssl-ciphersuite 'ALL:!ADH:!EXPORT:!eNULL:!MD5:!DES:!SSLv2:-TLSv1:-SSLv3:RC4-SHA'  OR modify /sys httpd ssl-ciphersuite HIGH OR .... something else.

I want the highest (strongest  ciphersuite/level of security.