SSL Profiles Part 4: Cipher Suites

Hi Jason,

 

Good post but I´m wondering of some things here.

 

I have always used @strenght in other plattforms (like nortel SSL gateway,etc.) but F5 said before that you shouldn´t use it. Has this changed in 10.2?

 

IMHO it´s better to use the syntax tmm --clientciphers 'xxxx' instead of openssl because you then will see if the ciphers are in compat or native mode.

 

And It´s not the same ciphers if you check these syntax.