TLS/SSL weak messgae auth on code cipher suites

Question

hello,i have received a vulnerability for our published services for the subject weak ciphers.Cipher suites:&nbsp;DEFAULT:!DHE:!RSA:!DES:!3DES is configured with TLSv1.2 enabled.How to resolve any help would be appreciated.Thanks

mihaic · Answer

you could use this:
DEFAULT:!DHE:!RSA:!DES:!3DES@STRENGTH&nbsp;
it will order&nbsp;SSL ciphers by strength
https://support.f5.com/csp/article/K13171
then you have to see which ciphers appear to be weak when you scan your virtual server using qualis
https://www.ssllabs.com/ssltest/
And then remove them&nbsp; just like you removed&nbsp;3DES for example ,
&nbsp;

Forum Discussion

TLS/SSL weak messgae auth on code cipher suites

1 Reply

Recent Discussions

F5Access | MacOS Sonoma

Rewrite uri translation not working

Chrome V 124+ on MacOS - Virtual Server Access Issue

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

TMOS script for updating SSL profile cipher group and TLS versions

F5 ICAP over SSL/TLS (Secure ICAP) with F5 ASM/AWAF Antivirus Protection feature

TLS Fingerprinting to profile SSL/TLS clients without decryption

CLIENT_HELLO SSL TLS version insert

Cipher Suites Supported (12.1.5.3)