TLS ciphers order - Symantec Messaging Gateway

Products

• Messaging Gateway

Issue/Introduction

Is there a way to set a TLS ciphers order?

Environment

SMG 10.9.0

Resolution

Cipher negotiation occurs at the TLS integration level, ensuring the selection of the most secure shared cipher suite. You have the option to restrict the available ciphers using the CLI command "cc-config set-ciphers". However, you cannot set a specific order for the ciphers.

The default set of ciphers includes:

• TLS_RSA_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_AES_256_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA