4.5 Configuring Stronger Ciphers for SSL Communication between Access Gateway and Web Servers

See the overview of Strengthening TLS/SSL Settings for information about strong ciphers.

Add or modify the advanced option as follows:

SSLProxyCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:MEDIUM:!LOW:!EXP:!SSLv2:!aNULL:!EDH:!ECDH:!ECDSA:!AESGCM:!eNULL:!NULL

While setting the cipher suite, ensure that the web server supports the cipher suite. For example, if Access Manager supports ECDH ciphers, but the web server does not support that, the connection will fail.