Disable DHE Ciphers - SSL Parent Profile
I'm currently running 11.6.0 on most of my devices and am looking to upgrade passed version 12.0 in the near future. Looking at the iHealth Upgrade Advisor, I need to disable DHE ciphers on all of my Server SSL Profiles before upgrading. I added DEFAULT:!EXPORT:!DHE to one of my Server SSL Profiles and it is no longer getting flagged in iHealth. Can I add that string to the Server SSL parent profile, or do I have to add that to each profile individually? Will updating the parent profile have any adverse effects on my other profiles, or would the Cipher settings be the only thing that changes?
Can I merge parent ASM policy without losing learning suggestions
I thought I'd implement a parent ASM policy on a new v13 installation. Now when I review traffic learning in the child policy the suggestions are locked and need to be accepted in the parent policy, but you can only see the details in the child policy. Given the inconvenience of this, I would like to remove the parent policy, and make the child policy stand-alone. Can someone suggest a safe way to do this? If I do this, am I going to lose all the learning so far?How to update a "Parent Policy" via a "Policy Template" ?
The Policy Summary view in ASM v13 shows the name of the Policy Template for Security- as well for Parent Policies. It seems to be just for informational purposes, or is there a way to change the Parent Policy settings according to a modified Policy Template without replacing the wohle policy manually?