Technical Forum
Ask questions. Discover Answers.
cancel
Showing results for 
Search instead for 
Did you mean: 
Custom Alert Banner

TLS/SSL weak messgae auth on code cipher suites

shaikhzaid
Altocumulus
Altocumulus

hello,

i have received a vulnerability for our published services for the subject weak ciphers.

Cipher suites: DEFAULT:!DHE:!RSA:!DES:!3DES is configured with TLSv1.2 enabled.

How to resolve any help would be appreciated.

Thanks

1 REPLY 1

mihaic
MVP
MVP

you could use this:

DEFAULT:!DHE:!RSA:!DES:!3DES@STRENGTH 

it will order SSL ciphers by strength

https://support.f5.com/csp/article/K13171

then you have to see which ciphers appear to be weak when you scan your virtual server using qualis

https://www.ssllabs.com/ssltest/

And then remove them  just like you removed 3DES for example ,