Forum Discussion

mkumar1113_2457's avatar
mkumar1113_2457
Icon for Nimbostratus rankNimbostratus
Mar 02, 2019

Security check for F5 URL

Following issues related to F5 URL are observed at multiple places during security scan.   Critical : Insecure Transport: Insufficient Diffie Hellman Strength, ID 80641927 : https://services-stg...
application delivery
BIG-IP
Michael_Saleem's avatar
Michael_Saleem
Icon for MVP rankMVP
Mar 02, 2019

Hi,

 

The SSL labs report indicate you are using weak DH params (1024 bits)

 

I am assuming that you are terminating SSL on the F5 virtual server. To resolve this in the client SSL profile applied to the virtual server, disable DHE (but keep ECDHE enabled). It would also be a good idea to prioritise ECDHE so that it is at the top of the cipher suite preference order.