Aviv
Jul 12, 2015Cirrus
SSL Ciphers
Hi!
i have big-ip 11.5.1
according to ssllabs.com test i need to config only this ciphers on ssl profile :
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) 112
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) 1...
This should get you what you need:
!SSLv3:!EXPORT:RSA+AES:RSA+AES-GCM:ECDHE+3DES:@strength
Which produces the following cipher list:
AES256-SHA256 256 TLS1.2 Native AES SHA256 RSA
AES256-SHA 256 TLS1 Native AES SHA RSA
AES256-SHA 256 TLS1.1 Native AES SHA RSA
AES256-SHA 256 TLS1.2 Native AES SHA RSA
AES256-SHA 256 DTLS1 Native AES SHA RSA
AES256-GCM-SHA384 256 TLS1.2 Native AES-GCM SHA384 RSA
ECDHE-RSA-DES-CBC3-SHA 192 TLS1 Native DES SHA ECDHE_RSA
ECDHE-RSA-DES-CBC3-SHA 192 TLS1.1 Native DES SHA ECDHE_RSA
ECDHE-RSA-DES-CBC3-SHA 192 TLS1.2 Native DES SHA ECDHE_RSA
AES128-SHA256 128 TLS1.2 Native AES SHA256 RSA
AES128-SHA 128 TLS1 Native AES SHA RSA
AES128-SHA 128 TLS1.1 Native AES SHA RSA
AES128-SHA 128 TLS1.2 Native AES SHA RSA
AES128-SHA 128 DTLS1 Native AES SHA RSA
AES128-GCM-SHA256 128 TLS1.2 Native AES-GCM SHA256 RSA