Nimbostratus@Rob, Do you want to disable only Weak cipher, which you have pasted in Question section. Let us know.
Noctilucent@Rob, Do you want to disable only Weak cipher, which you have pasted in Question section. Let us know.
NoctilucentDisable below cipher in-order to eliminate weak cipher list. I have tested in v12 and all weak cipher gone. Suggest you to test in LAB environment and share feedback. Most important thing, don't play with default
client-sslFind the weak cipher list as per above question .
AES256-SHA256
AES128-SHA256
AES256-SHA
AES128-SHA
DES-CBC3-SHA
TLS 1.1 (Weak suites in server-preferred order)
AES256-SHA
AES128-SHA
DES-CBC3-SHA
TLS 1.0 (Weak suites in server-preferred order)
AES256-SHA
AES128-SHA
DES-CBC3-SHA