Cipher Filtering and Cipher Sorting

With v6.1, SPAdmin adds support for Cipher List Filtering and Cipher List Sorting on the Edit Options panel. The Cipher filtering is implemented by protocol and security mode displays only ciphers that are supported for the selected protocol on the Cipher Selection panel. The Cipher sorting on the Selection panel will display ciphers from strongest to weakest.

The Edit Option panel will allow the user to change the filtering and sorting options. The filtering option will be Protocol or None. Filtering option of None will disable the filtering and all supported ciphers will be displayed regardless of the protocol selected. The sorting option of Strongest sorts the cipher list from strongest to weakest while an option of Weakest sorts from weakest to strongest.

To change Cipher Filtering and Cipher Sorting options:

  1. Select Edit from the Secure+ Admin Tool Main Screen and press Enter.
  2. On the Edit menu, select 3 for Edit Options (EO) and press Enter to display the Edit Option panel.
    +---------------------- Secure+ Admin Tool Edit options ----------------------+
    |                                                                             |
    | Option --->                                                                 |
    |                                                                             |
    |  Node                            Show FLASH Panel at                        |
    |  Name Filter: *                  Startup: Y (Yes or No)                     |
    |                                                                             |
    |  Confirm                        Cipher Filtering: N (Protocol or None)      |
    |  Prompt: Y (Yes or No)          Cipher Sorting  : S (Strongest or Weakest)  |
    |                                                                             |
    |                                                                             |
    |                                                                             |
    |                                                                             |
    |                                                                             |
    |                                                                             |
    |                                                                             |
    |                                                                             |
    |                                                                             |
    +-----------------------------------------------------------------------------+
  3. On Cipher Filtering field:
    • Type P to enable Cipher Filtering by protocol. By selecting this option, only cipher suites specific to selected protocol will be displayed on Cipher Selection panel, or
    • Type N to disable Cipher Filtering. By selecting this option, all the cipher suites will be displayed on Cipher Selection panel.
  4. On Cipher Sorting field:
    • Type S to sort ciphers from strongest to weakest on Cipher Selection panel, or
    • Type W to sort ciphers from weakest to strongest on Cipher Selection panel.

      For example, if Cipher Filtering is P and Cipher Sorting is S and user have enabled TLS1.3 protocol, then Cipher Selection panel will be displayed as follows:

     Option --->
    
          Cipher Filtering:Protocol         Cipher Sorting:Strongest
    
          Update the order field below to enable and order Cipher Suites
    
      O   All Available Cipher Suites          Enabled Cipher Suites
     ==   ==================================== ====================================
                                                                        More:     +
         TLS_AES_256_GCM_SHA384
         TLS_AES_128_GCM_SHA256
    
    
    
    Note: In Cipher Selection Panel, you can also view Cipher Filtering and Cipher Sorting setting as displayed in the screen above.