TLS/SSL weak messgae auth on code cipher suites

you could use this:

DEFAULT:!DHE:!RSA:!DES:!3DES@STRENGTH 

it will order SSL ciphers by strength

https://support.f5.com/csp/article/K13171

then you have to see which ciphers appear to be weak when you scan your virtual server using qualis

https://www.ssllabs.com/ssltest/

And then remove them  just like you removed 3DES for example ,