Lists the supported cipher suites for incoming HTTPS requests. If a client request comes into FortiADC that does not use a cipher in this list, the connection is refused.

FortiADC supports DHE-RSA, DHE-DSS, ECDHE-RSA, and ECDHE-ECDSA cipher suites.

Flags

Enables SSLv2 for client connections.

Enables SSLv3 for client connections. This option is enabled by default.

This flag appears only on systems that are equipped with Hardware SSL Acceleration. When enabled, it specifies that all SSL operations will be performed in software, instead of being performed using the SSL accelerator hardware. This flag does not appear on systems that are not equipped with Hardware SSL Acceleration, since on these units SSL operations are always performed in software. This flag is disabled by default.

Please note that enabling this option will reduce the processor and memory resources generally available for processing cluster traffic, since performing SSL operations in software requires use of the system CPU and system memory (instead of the dedicated SSL acceleration hardware CPU and memory).

This option enables and disables support for the TLSv1.0 protocol. Enabled by default. If multiple TLS versions are enabled, the first supported TLS version negotiated by a client will be used.

This option enables and disables support for the TLSv1.1 protocol. Disabled by default. If multiple TLS versions are enabled, the first supported TLS version negotiated by a client will be used.