For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

S_Meulmeester's avatar
S_Meulmeester
Icon for Cirrus rankCirrus
Sep 11, 2019

Vulnerability SSL Medium Strength Cipher Suites Supported

From the PCI audit I get the following: Vulnerability SSL Medium Strength Cipher Suites Supported Currently the following is configured: list sys httpd sys httpd {     auth-pam-idle-timeout 2400 ...
BIG-IP
LTM
security
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Sep 11, 2019

Hi,

 

There is a solution, get rid of all the low and medium level ciphers from apache conf file.

Try this first, it can fix your problem:

 

TLSv1.2+HIGH:!aNULL:!eNULL

 

Keep me in touch.