My Info Sec team wants to remove some specific TLS-RSA ciphers which do not support forward secrecy. I am not very familiar with the cipher suite syntax on an expressway but can I append a "-" plus the specific cipher suites I want to disable? For example, if I append ":-TLS-RSA-AES128-CBC-SHA:-TLS-RSA-AES128-CBC-SHA256" will that then disable these two ciphers? I just want to make sure I have the correct syntax if this method will work.
