Enable TLS 1.3 and Disable DH group

[SolarJeans]

Hello Experts,

I have a task need to enable TLS 1.3 and disable DH group.

To enable TLS 1.3, I can use cipher group to do by this link https://my.f5.com/manage/s/article/K10251520

To disable DH, I can use DEFAULT:!DH

But how to do this together?

[Paulius · Accepted solution]

@SolarJeans This link should assist you in creating the appropriate custom cipher group.

https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-ltm-configuring-custom-cipher-string-for-ssl-negot...

[SolarJeans]

Hello,

Yes, I try to create custom cipher rule and custom cipher group and issue fixed. Thanks a lot.

[Samir]

You can try something like this to enable tls1.3 and disable DHE

DEFAULT:TLSV1_3:!DHE