Weak SSL cipher vulnerability during website vulnerability test

Navigate to the client side SSL profiles you use. Within the Configuration section of each, change the dropdown box from Basic to Advanced. You will see a cipher suites field with the entry "DEFAULT".

I recommend you change it to the following:

ECDHE+AES-GCM:ECDHE+AES:DEFAULT:!TLSv1:!DHE:!RC4:!MD5:!EXPORT:!LOW:!SSLv2

I also recommend adding the following iRule to all of your SSL VIPs as it will help you score an A or better on a Qualys SSL Labs scan:

when HTTP_RESPONSE {

HTTP::header insert Strict-Transport-Security "max-age=31536000; includeSubDomains"

}