Forum Discussion

stephen_piskor_'s avatar
stephen_piskor_
Icon for Nimbostratus rankNimbostratus
Sep 07, 2017

Disable Specific SSL Ciphers on F5 Big IP

Hi,   F5 novice here. Due to the results of a recent pentest I need to disable 3DES and RC4 ciphers on our F5 Big IP running 12.1.   I have been able to edit the existing ciphers and successful...
BIG-IP
security
pponte_266335's avatar
pponte_266335
Icon for Altostratus rankAltostratus

I think you could read these links.

 

link 1 link 2

 

You can order the list to make it as you like, e.g: ciphers DEFAULT:RSA+AES-GCM:RSA+AES:@STRENGTH

 

I hope it helps

 

stephen_piskor_'s avatar
stephen_piskor_
Icon for Nimbostratus rankNimbostratus
Sep 07, 2017

Even better..

 

DEFAULT:!DHE:!3DES

 

I now get an A- due to PFS being disabled.