Hardening

This solution has the explanation and steps:

https://support.f5.com/csp/article/K17370

Hello,

Instead of listing all ciphers that you want to allow. It may be simpler to accept except those that are weak.

Example: To remove all AES128-SHA ciphers you can use the following format.

DEFAULT:!AES128-SHA

You can consult the list of ciphers included in the DEFAULT for your BIG IP version here :

https://support.f5.com/csp/article/K13156

Hope it helps

Regards