So we're trying to address insecure cipher findings on our MPX14020 FIPS appliances. We have a custom cipher group configured, and when we set the group to only have these two ciphers TLS1.2-ECDHE-RSA-AES256-GCM-SHA384 -cipherPriority and TLS1.2-ECDHE-RSA-AES128-GCM-SHA256 the VIPs work fine, but it breaks the management GUI. We found that we have to enable TLS1.2-AES256-GCM-SHA384 cipher to restore access to the management GUI. Any idea of why TLS1.2-AES256-GCM-SHA384 would be needed on the management GUI? Wireshark trace shows the Netscaler responding with a handshake failure after the client hello.