Hello,
one of my clients would like to use the best ciphers available nowadays for their secure web sites.
I did take a look at this page :
http://www.cisco.com/en/US/partner/products/hw/contnetw/ps792/products_command_reference_chapter09186a0080157a4c.html#wp1139899
but I really don't know which one is the best for us.
We're doing server authentication with an Verisign Certificate , the clients OS is win2k and above.
CSS1# sh ssl associate rsakey acvonlinekey1
1024-bit RSA keypair
ssl-proxy-list sslacvcsc
ssl-server 1
ssl-server 1 vip address 192.168.167.10
ssl-server 1 rsakey acvonlinekey1
ssl-server 1 cipher rsa-export1024-with-rc4-56-sha 192.168.1.1 81
ssl-server 1 cipher rsa-export1024-with-des-cbc-sha 192.168.1.1 81
ssl-server 2
ssl-server 2 vip address 192.168.167.11
ssl-server 2 rsakey cscenlignekey1
ssl-server 2 cipher rsa-export1024-with-rc4-56-sha 192.168.1.2 81
ssl-server 2 cipher rsa-export1024-with-des-cbc-sha 192.168.1.2 81
ssl-server 1 rsacert certificat-csc-en-ligne1
ssl-server 2 rsacert certificat-acv-online2
ssl-server 1 cipher rsa-with-rc4-128-sha 192.168.1.1 81
active
Any help or advice ??
Lionel