Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP AFM
Fixed In:
17.5.0
Opened: Feb 03, 2023 Severity: 4-Minor
Below 3 DB Variables were added to control particular ciphers only. sys db sshplugin.enable_3des_and_blowfish_ciphers { value "false" } sys db sshplugin.enable_dh_group14_sha1_kex_alg { value "false" } sys db sshplugin.enable_hmac_sha1_mac { value "false" }
Only three ciphers can be controlled with the three db variables but not all of them
3 Db Variables should be configured to true/false to enable/disable ciphers
None
Removed support for three DB variables: -- sshplugin.enable_3des_and_blowfish_ciphers -- sshplugin.enable_dh_group14_sha1_kex_alg -- sshplugin.enable_hmac_sha1_mac
The following DB variables have been removed: sys db sshplugin.enable_3des_and_blowfish_ciphers { value "false" } sys db sshplugin.enable_dh_group14_sha1_kex_alg { value "false" } sys db sshplugin.enable_hmac_sha1_mac { value "false" }