TLS/SSL weak messgae auth on code cipher suites

[shaikhzaid]

hello,

i have received a vulnerability for our published services for the subject weak ciphers.

Cipher suites: DEFAULT:!DHE:!RSA:!DES:!3DES is configured with TLSv1.2 enabled.

How to resolve any help would be appreciated.

Thanks

[mihaic]

you could use this:

DEFAULT:!DHE:!RSA:!DES:!3DES@STRENGTH 

it will order SSL ciphers by strength

https://support.f5.com/csp/article/K13171

then you have to see which ciphers appear to be weak when you scan your virtual server using qualis

https://www.ssllabs.com/ssltest/

And then remove them  just like you removed 3DES for example ,