We have a AEM (Adobe experience manager) 6.2 application.
I recently been advised to exclude/remove the weak ciphers for strict security policies. But I am not sure where shall I do the configuration changes because our request flows through first Akamai, Load balancer, Publisher dispatcher, publisher sequentially. Apart from Akamai , everything is deployed in AWS.
Every request first hits the Akamai so I am assuming that cipher negotiation happens between browser and Akamai and then SSL handshake happens.
Also, I am not my concern at the moment but curios to figure out, where does the ssl handshake is taking place browser to (Akamai or load balancer, dispatcher, publisher)