# Disable RC4 in A10 **URL:** \ **Category:** ADC - Application Delivery\ **Created:** [October 1, 2020, 4:26pm UTC](https://community.a10networks.com/t/disable-rc4-in-a10/625 "2020-10-01T16:26:40Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![kakumaku](https://avatars.discourse-cdn.com/v4/letter/k/839c29/32.png) [@kakumaku](https://community.a10networks.com/u/kakumaku)\ **Post date:** [October 1, 2020, 4:26pm UTC](https://community.a10networks.com/t/disable-rc4-in-a10/625/1 "2020-10-01T16:26:40Z")
How can we disable rc4 in A10? There is no option of RC4 in cipher template. Can I do something like this? DEFAULT:!RC4:!SSLv3:!SSLv2:!TLSv1 If yes, where to add this? Thanks in advance! ---
**Author:** ![mdunn](https://avatars.discourse-cdn.com/v4/letter/m/87869e/32.png) [@mdunn](https://community.a10networks.com/u/mdunn)\ **Post date:** [October 1, 2020, 5:15pm UTC](https://community.a10networks.com/t/disable-rc4-in-a10/625/2 "2020-10-01T17:15:11Z")
Within the cipher template, only ciphers which are added will be offered for negotiation. If you exclude the RC4 ciphers from the template, this effectively disables RC4. Attached is the supported ciphers list. [A10-Thunder-SSL\_Cipher\_List\_05122020.pdf](https://community.a10networks.com/uploads/short-url/kY4FFeRFs0qWdt4X7o01ukJ18GL.pdf) (267 KB) ---
**Author:** ![kakumaku](https://avatars.discourse-cdn.com/v4/letter/k/839c29/32.png) [@kakumaku](https://community.a10networks.com/u/kakumaku)\ **Post date:** [October 1, 2020, 5:58pm UTC](https://community.a10networks.com/t/disable-rc4-in-a10/625/3 "2020-10-01T17:58:02Z")
Thanks for your response. If I don’t select any specific cipher template in the client-ssl, does it mean it will present all the ciphers in this list to the user? Interestingly, I tested a VIP in ssllabs and could see that RC4 is enabled for TLS 1.2 1.1 and 1.0 as well, but when I see the list of ciphers it presents while creating a new cipher template, there is no cipher with RC4 in it… ---
**Author:** ![mdunn](https://avatars.discourse-cdn.com/v4/letter/m/87869e/32.png) [@mdunn](https://community.a10networks.com/u/mdunn)\ **Post date:** [October 1, 2020, 7:33pm UTC](https://community.a10networks.com/t/disable-rc4-in-a10/625/4 "2020-10-01T19:33:21Z")
That is curious. Yes, if no ciphers are specified, then the default should be all ciphers which the device supports. What version of ACOS are you running? Would you like to share your cipher & client-ssl template here? ---
**Author:** ![kakumaku](https://avatars.discourse-cdn.com/v4/letter/k/839c29/32.png) [@kakumaku](https://community.a10networks.com/u/kakumaku)\ **Post date:** [October 5, 2020, 3:14pm UTC](https://community.a10networks.com/t/disable-rc4-in-a10/625/5 "2020-10-05T15:14:01Z")
# version 4.1.1-P6, build 62 (Nov-10-2017,20:11) there is no cipher template attached to this client-ssl template. when I test this VIP in ssllabs, I see this: TLS\_RSA\_WITH\_RC4\_128\_SHA (`0x5`)   **INSECURE** **==========================** **This is but I get when I try to create a new cipher template: But I don’t see so many Ciphers in the GUI. Interestingly, the cipher shown above is not in the below list. I am curious from where is it coming and how to disable RC4 in all the protocols.** # A10(config)#slb template cipher test6 A10(config-cipher)#?  clear                Clear or Reset Functions  do                  To run exec commands in config mode  end                 Exit from configure mode  exit                 Exit from configure mode or sub mode  no                  Negate a command or set its defaults  show                 Show Running System Information  user-tag               Customized tag  write                Write Configuration  SSL3\_RSA\_DES\_192\_CBC3\_SHA      SSL3\_RSA\_DES\_192\_CBC3\_SHA  SSL3\_RSA\_RC4\_128\_MD5         SSL3\_RSA\_RC4\_128\_MD5  SSL3\_RSA\_RC4\_128\_SHA         SSL3\_RSA\_RC4\_128\_SHA  TLS1\_RSA\_AES\_128\_SHA         TLS1\_RSA\_AES\_128\_SHA  TLS1\_RSA\_AES\_256\_SHA         TLS1\_RSA\_AES\_256\_SHA  TLS1\_RSA\_AES\_128\_SHA256       TLS1\_RSA\_AES\_128\_SHA256  TLS1\_RSA\_AES\_256\_SHA256       TLS1\_RSA\_AES\_256\_SHA256  TLS1\_DHE\_RSA\_AES\_128\_GCM\_SHA256   TLS1\_DHE\_RSA\_AES\_128\_GCM\_SHA256  TLS1\_DHE\_RSA\_AES\_128\_SHA       TLS1\_DHE\_RSA\_AES\_128\_SHA  TLS1\_DHE\_RSA\_AES\_128\_SHA256     TLS1\_DHE\_RSA\_AES\_128\_SHA256  TLS1\_DHE\_RSA\_AES\_256\_GCM\_SHA384   TLS1\_DHE\_RSA\_AES\_256\_GCM\_SHA384  TLS1\_DHE\_RSA\_AES\_256\_SHA       TLS1\_DHE\_RSA\_AES\_256\_SHA  TLS1\_DHE\_RSA\_AES\_256\_SHA256     TLS1\_DHE\_RSA\_AES\_256\_SHA256  TLS1\_ECDHE\_ECDSA\_AES\_128\_GCM\_SHA256 TLS1\_ECDHE\_ECDSA\_AES\_128\_GCM\_SHA256  TLS1\_ECDHE\_ECDSA\_AES\_128\_SHA     TLS1\_ECDHE\_ECDSA\_AES\_128\_SHA  TLS1\_ECDHE\_ECDSA\_AES\_128\_SHA256   TLS1\_ECDHE\_ECDSA\_AES\_128\_SHA256  TLS1\_ECDHE\_ECDSA\_AES\_256\_GCM\_SHA384 TLS1\_ECDHE\_ECDSA\_AES\_256\_GCM\_SHA384  TLS1\_ECDHE\_ECDSA\_AES\_256\_SHA     TLS1\_ECDHE\_ECDSA\_AES\_256\_SHA  TLS1\_ECDHE\_RSA\_AES\_128\_GCM\_SHA256  TLS1\_ECDHE\_RSA\_AES\_128\_GCM\_SHA256  TLS1\_ECDHE\_RSA\_AES\_128\_SHA      TLS1\_ECDHE\_RSA\_AES\_128\_SHA  TLS1\_ECDHE\_RSA\_AES\_128\_SHA256    TLS1\_ECDHE\_RSA\_AES\_128\_SHA256  TLS1\_ECDHE\_RSA\_AES\_256\_GCM\_SHA384  TLS1\_ECDHE\_RSA\_AES\_256\_GCM\_SHA384  TLS1\_ECDHE\_RSA\_AES\_256\_SHA      TLS1\_ECDHE\_RSA\_AES\_256\_SHA  TLS1\_RSA\_AES\_128\_GCM\_SHA256     TLS1\_RSA\_AES\_128\_GCM\_SHA256  TLS1\_RSA\_AES\_256\_GCM\_SHA384     TLS1\_RSA\_AES\_256\_GCM\_SHA384  TLS1\_ECDHE\_RSA\_AES\_256\_SHA384    TLS1\_ECDHE\_RSA\_AES\_256\_SHA384  TLS1\_ECDHE\_ECDSA\_AES\_256\_SHA384   TLS1\_ECDHE\_ECDSA\_AES\_256\_SHA384 A10(config-cipher)# # slb template client-ssl \*.xxx  chain-cert godaddy\_bundle-CA-G2   cert xxx  client-certificate Ignore   forward-proxy-verify-cert-fail-action drop   forward-proxy-cert-revoke-action bypass   forward-proxy-cert-unknown-action bypass   forward-proxy-hash-persistence-interval 30   forward-proxy-ssl-version 33   forward-proxy-cert-cache timeout 3600   forward-proxy-cert-cache limit 524288   forward-proxy-cert-not-ready-action bypass   key xxx   session-cache-size 0   session-cache-timeout 0   session-ticket-lifetime 0   version 33 32  ! ---
**Author:** ![mdunn](https://avatars.discourse-cdn.com/v4/letter/m/87869e/32.png) [@mdunn](https://community.a10networks.com/u/mdunn)\ **Post date:** [October 7, 2020, 2:09pm UTC](https://community.a10networks.com/t/disable-rc4-in-a10/625/6 "2020-10-07T14:09:26Z")
I do see the confusion around that cipher. I also can find no reference of it in the supported cipher list or in the configuration options. My recommendation would be to configure a cipher template and bind that to the client-ssl template. You already have “version” configured, so adding the cipher template should produce the desired results.