How do I disable some cipher suites in Webserver Protection?

I have chased these issues, and what follows below are from my notes.  The current settings vary with the UTM release.   The new settings are suggestions, which you should be able to tailor to your preference by mimicking the examples.

HIGH, MEDIUM, and LOW are OpenSSL keywords which correspond to a bundle of ciphers.   Only HIGH ciphers are considered acceptable anymore.

To test the cipher results for any given keyword combination, you can use this command from the shell

openssl ciphers keywordlist

Except that not (like !MD5 ) commands, you need to add an escape from the shell, 

for example: 

openssl ciphers HIGH:\!MD5:\!SHA1

-------------------------------------------------

Applies to: WebAdmin, User Portal, Mail Manager, SPX Reply Portal

cd /var/sec/chroot-httpd/etc/httpd/

vi httpd.conf
--- Current -----
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AES:!ADH:!AECDH:!MD5:!DSS:!3DES
SSLProtocol +TLSv1.1 +TLSv1.2
--- New -----
SSLCipherSuite HIGH:!MD5:!SHA1
SSLProtocol +TLSv1.2
-------------

/etc/init.d/httpd restart

*** completed **** still have cert issue
==================================================================

Applies to: WAF ReverseProxy

cd /var/chroot-reverseproxy/usr/apache/conf/

vi httpd.conf
--- Current -----
SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:ECDH+3DES:DH+3DES:RSA+3DES:!aNULL:!MD5:!DSS
SSLProtocol all -SSLv2 -SSLv3
--- New -----
SSLCipherSuite HIGH:!MD5:!SHA1
SSLProtocol +TLSv1.2
-------------

/var/mdw/scripts/reverseproxy restart

Hi,

        Is this an Official/Legal way to disable weak ciphers?  I read in some other posts that If you do this you may loose your Sophos warranty.

Thanks and Best Regards,
Asif  

Hi,

        Is this an Official/Legal way to disable weak ciphers?  I read in some other posts that If you do this you may loose your Sophos warranty.

Thanks and Best Regards,
Asif