Forum Discussion

Ajaz_Ahmed_3671's avatar
Ajaz_Ahmed_3671
Icon for Nimbostratus rankNimbostratus
Jul 26, 2018

Weak Ciphers - BigIP 11.5.4

Hello Everyone,

 

I have BIG-IP 11.5.4 in production and below Ciphers for SSL profile:

 

DEFAULT:!RC4:!3DES

 

There are some open weak ciphers when I scan.

 

TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d)

 

TLS_RSA_WITH_AES_256_CBC_SHA (0x35)

 

TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c)

 

TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)

 

Can someone please help me on this, let me know how to block these and if there are any ciphers then please share it?

 

application delivery
BIG-IP
LTM
security
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Jul 27, 2018

    If you have only problem with above mentioned weak cipher then use below.

    Validate these cipher in non-prod environment then go for prod. 

        DEFAULT:!RC4:!3DES:!AES256-SHA256:!AES256-SHA:!AES128-SHA256:!AES128-SHA:@STRENGTH

    Update us if any issue. Happy to help.

    • Ajaz_Ahmed_3671's avatar
      Ajaz_Ahmed_3671
      Icon for Nimbostratus rankNimbostratus
      Jul 27, 2018

      Hey, thanks for your help. I'll validate the given cipher and update here.