Forum Discussion

chester_16314's avatar
chester_16314
Icon for Nimbostratus rankNimbostratus
Mar 09, 2012

SSL Profiles and Strength

Hoping this is the right group within which to pose this question.       When I view my ssl certificate summary in Chrome for instance, it says "your connection to xyz is encrypted with 128...
security
nitass's avatar
nitass
Icon for Employee rankEmployee
Mar 11, 2012
but shouldn't I be able to elevate up from 128 if my browser (talking https here) can support it?you have to modify ciphers setting in clientssl profile.

 

 

sol7815: Configuring the cipher strength for SSL profiles (9.x - 10.x)

 

http://support.f5.com/kb/en-us/solutions/public/7000/800/sol7815.html

 

 

just in case this is for config utility (webui).

 

 

sol6768: Restricting Configuration utility access to clients using high encryption SSL ciphers (9.x - 10.x)

 

http://support.f5.com/kb/en-us/solutions/public/6000/700/sol6768.html

 

 

Should I have something set differently in the BigIP to default to the highest level possible or should I be changing a client browser setting to increase my rate?since we can't control all client, i prefer setting it on bigip side.