How can I change the cipher strength for a website published through the reverse proxy ?

Products

• SG-300
• SG-600
• SG-510
• SG-9000

Issue/Introduction

To change the cipher for all the websites published through the Blue Coat reverse proxy, you have to individually change the cipher for all of the https-reverse-proxy services you’ve created.

The following example shows how to make the changes for a webserver that is using the (domain.com) https-reverse-proxy service:

#conf t

(config)# proxy-services

(config proxy-services)# edit domain.com

(config domain.com)# attribute cipher-suite <choose the cipher required>

O.K

(config domain.com)# exit

 

Choose from among these ciphers:

1. RC4-MD5    Medium
2. RC4-SHA    Medium
3. DES-CBC3-SHA      High
4. DES-CBC3-MD5      High
5. RC2-CBC-MD5    Medium
6. DES-CBC-SHA       Low
7. DES-CBC-MD5       Low
8. EXP-RC4-MD5    Export
9. EXP-RC2-CBC-MD5    Export
10. EXP-DES-CBC-SHA    Export
11. AES128-SHA    Medium
12. AES256-SHA      High