R80.30 with HTTPs interception and Perfect Forward Secrecy with ECDHE/ECDSA cipher suites

[5809265c-0181-3]

Dear Check Mates,

is it still necessary to manually configure ECDHE/ECDSA cipher suites in R80.30 as mentioned in sk104717 chapter “Perfect Forward Secrecy (PFS)” to enable these cipher suites and PFS?

Thank you in advance.

[PhoneBoy]

ECDHE/ECDSA is enabled, but it's not the default.
If you want the system to ONLY propose those cipher suites, you still need to follow the steps in sk104717.