On the STM (SteelApp) how can we setup:
Enable Forward Secrecy
Are there any specific cipher suites you are looking for?
Current have the following:
and would like to have Forward Secrecy enabled based on our scan
Security Labs: SSL Labs: Deploying Forward Secrecy | Qualys Community
For each SSL decrypting virtual server, you can use the ssl_support_<version> and ssl_ciphers configuration options to configure the SSL/TLS versions individually by selecting the SSL/TLS versions and specifying the list of ciphers available for secure communication.
Specify your ciphers (in order of preference) in a space-, comma-, or colon-separated list, as shown in the following example:
To use the global settings configured, leave the Virtual server SSL/TLS settings to defaults but specify the comma separated list of ciphers under System > Global Settings > SSL Configuration.
Did my suggestion help your requirement?