Nimbostratuschanging DEFAULT ciphers v14.x
In version 14.x, will be adding ciphers to the DEFAULT ciphers list to give traffic a way to communicate between the F5 LTM and real servers. (Have done the research discovered LTM and real servers weren't communicating because they had no ciphers in common. Planning on adding about 40 additional secure ciphers that the real servers are trying to use.)
I can't use a clientSSL or clientSSL/serverSSL profile because Performance Layer 4 with FastL4 doesn't allow SSL profiles. Using a Standard server is not an option.
What is the best way to do this? and will this work?
Thx
If you are using a PerfomanceL4/FastL4 Virtual Server, the BIGIP is not communicating TLS with the back end servers. The BIGIP in this case would be passing TCP traffic through from the client directly to the server. The TLS handshake would not involve the BIGIP so any changes to cipher lists on the BIGIP would be irrelevant.
