4.5 Configuring Stronger Ciphers for SSL Communication between Access Gateway and Web Servers

See the overview of Strengthening TLS/SSL Settings for information about strong ciphers.

Click Devices > Access Gateways > Edit > Advanced Options and set the following advanced option:

SSLProxyCipherSuite ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4:HIGH:MEDIUM:!LOW:!EXP:!SSLv2:!aNULL:!EDH:!ECDH:!ECDSA:!AESGCM:!eNULL:!NULL

While setting the cipher suite, ensure that the web server supports the cipher suite. For example, if Access Manager supports ECDH ciphers, but the web server does not support that, the connection will fail.