Forum Discussion

Olivier_J_'s avatar
Olivier_J_
Icon for Nimbostratus rankNimbostratus
Dec 10, 2021

Big IP F5 - Weak Ciphers Disabling

Hello all (sorry for my english)

 

After a scan security, i have to disable these weak ciphers, but i don't know how to do it :(.

 

I inputed ECDHE+AES-GCM:ECDHE+AES:ECDHE+3DES:RSA+AES-GCM:RSA+AES:!SSLv2:!SSLv3:!DH:!ADH:!EDH:!MD5:!EXPORT:!DES:!RC4, but this Cipher string is invalid. What is the error ?

 

Is there a tools to generate a Cipher suite ?

 

TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000A)

TLS_RSA_WITH_AES_128_CBC_SHA (0x002F)

TLS_RSA_WITH_AES_256_CBC_SHA (0x0035)

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xC009)

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xC00A)

TLS_RSA_WITH_AES_128_CBC_SHA256 (0x003C)

TLS_RSA_WITH_AES_256_CBC_SHA256 (0x003D)

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (0xC023)

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (0xC024)

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xC013)

TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009C)

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xC014)

TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009D)

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xC027)

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xC028)

 

Thanks à lot in advance.

 

Have a nice day.

OJ