Forum Discussion

Ajaz_Ahmed_3671's avatar
Ajaz_Ahmed_3671
Icon for Nimbostratus rankNimbostratus
Jul 26, 2018

Weak Ciphers - BigIP 11.5.4

Hello Everyone,   I have BIG-IP 11.5.4 in production and below Ciphers for SSL profile:   DEFAULT:!RC4:!3DES   There are some open weak ciphers when I scan.   TLS_RSA_WITH_AES_256_CBC_SHA...
application delivery
big-ip
LTM
security
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Jul 26, 2018

If you have only problem with above mentioned weak cipher then use below.

Validate these cipher in non-prod environment then go for prod. 

    DEFAULT:!RC4:!3DES:!AES256-SHA256:!AES256-SHA:!AES128-SHA256:!AES128-SHA:@STRENGTH

Update us if any issue. Happy to help.

  • Ajaz_Ahmed_3671's avatar
    Ajaz_Ahmed_3671
    Icon for Nimbostratus rankNimbostratus
    Jul 27, 2018

    Hey, thanks for your help. I'll validate the given cipher and update here.