diff --git a/resources/templates/conf/sip_profiles/external.xml.noload b/resources/templates/conf/sip_profiles/external.xml.noload
index f7bdca5bfc..8bab4cf839 100644
--- a/resources/templates/conf/sip_profiles/external.xml.noload
+++ b/resources/templates/conf/sip_profiles/external.xml.noload
@@ -98,7 +98,7 @@
 		<!-- TLS version ("sslv23" (default), "tlsv1"). NOTE: Phones may not work with TLSv1 -->
 		<param name="tls-version" value="$${sip_tls_version}"/>
 		<!-- TLS ciphers default: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH -->
-		<param name="tls-ciphers" value="$${sip_tls_ciphers}"/>
+		<param name="tls-ciphers" value="$${sip_tls_ciphers}" enabled="false"/>
 
 		<!-- suppress CNG on this profile or per call with the 'suppress_cng' variable -->
 		<param name="suppress-cng" value="true" enabled="true"/>