Forum Discussion

John_Ogle_45372's avatar
John_Ogle_45372
Icon for Nimbostratus rankNimbostratus
Mar 18, 2016

Example cipher suite needed...

I am running a box in our lab that is running 11.5.3. We have some very old Vista clients that need to access to two SSL VIPs. I need to use a cipher string that will support these ciphers below. I ...
application delivery
LTM
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Mar 18, 2016

I don't think you will need RC4. If you can test, give a try to 

ALL:!EXPORT:!RC4:!DES:!ADH:!EDH:!SSLv3

-This SSL/TLS config also complies with PCI DSS 3.0 (Enforced till the end of June 2016)

Although the string above qualifies for grade A in Qualys SSL labs, it's not perfect from a security standpoint. Windows Vista and XP clients on IE8 and newer can connect using TLS1.0 in combination with CBC.