Forum Discussion
darrenclegg_199
Nimbostratus
Nimbostratus3600 upgrades
Our F5s are 3600s and are now out of software development. We are currently running version 11.6.1 and have come across the ROBOT vulnerability in this version so want to upgrade to 11.6.2 HF1.
I tried to upgrade to version 11.6.2 HF1 but encountered the error - Configuration compatibility test failed.
Is this because version 11.6.2 HF1 does not work on a 3600? If that is the case is there any way I can get around this and install the version?
While version 11.6.2 is not supported on the 3600 platform, version 12.1.2 is per the F5 Hardware/Software Compatibility Matrix. And v12.1.2 HF2 is not vulnerable to ROBOT per K21905460: BIG-IP SSL vulnerability (ROBOT) CVE-2017-6168. I don't know whether migrating to 12.1.2 is a possibility for you, but recommend consulting with your F5 Sales Representative.
If you can not go with 12.1.2 HF2 a this stage, you just can disable RSA ciphers adding :!RSA to your cipher list
I would recommend you to contact with F5 sales team and discuss platform migration as soon as possible since current supported version are 11.5.5, 11.6.3, 12.1.3.x and 13.1.0.x and none of them is supported by 3600. If there is any new bug or vulnerability is found, you will not be able to mitigate that just because your hardware does not support new software version. On top of that, 3600 will reach end of rma and tech support on oct 2021 and you will not be able to get any support for your boxes after that.
