Incapsula TLS/SSL Tech Specs


By Yaniv
Follow

Incapsula supports the following features/settings for TLS/SSL:

 

Protocols

TLS 1.2

TLS 1.1

TLS 1.0 (can be disabled)

 

Cipher Suites (server-preferred order)

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

TLS_RSA_WITH_AES_256_GCM_SHA384

TLS_RSA_WITH_AES_128_GCM_SHA256

TLS_RSA_WITH_AES_256_CBC_SHA256

TLS_RSA_WITH_AES_256_CBC_SHA

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

TLS_RSA_WITH_AES_128_CBC_SHA256

TLS_RSA_WITH_AES_128_CBC_SHA

TLS_RSA_WITH_CAMELLIA_128_CBC_SHA

* Ciphers can be disabled upon request.

 

Features

  • ALPN         
  • Perfect/Forward Secrecy (PFS/FS via ECDHE ciphers)
  • Dynamic TLS Record Sizing
  • HSTS (HTTP Strict Transport Security)
  • Session identifiers
  • Session tickets
  • OCSP Stapling

 

Example SSL Labs report

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk