Forum Discussion

m_ru_119227's avatar
m_ru_119227
Icon for Nimbostratus rankNimbostratus
May 01, 2015

11.5.2 force Monitor to TLS 1.0

Hello   We recently upgraded from BigIP 11.3 to 11.5.2 and some HTTPS monitors and serverssl profiles stopped working. We narrowed it down to some Java Weblogic Servers that support ONLY TLS 1.0 (...
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
May 02, 2015

Any idea how to force a standard HTTPS monitor to TLS 1.0??

 

there is request for enhancement but not yet implemented.

 

ID504736 [RFE] Allow specifying desired SSL/TLS protocol version in HTTPS monitors

 

you may have to use external monitor (i.e. openssl s_client).

 

  • Mike_99062's avatar
    Mike_99062
    Icon for Nimbostratus rankNimbostratus
    May 17, 2015
    Hello Nitass, I'm a little confused and was wondering why in this instance, we couldn't match the cipher string in the Server SSL profile with the cipher string in the HTTPS Health Monitor? Thanks, Mike