Forum Discussion
Assistance in enabling TLS1.1 and TLS1.2
Need assistance in enabling TLS1.1 and TLS 1.2 in BIGIP LTM
Kindly help in providing the steps for enabling TLS1.1 and TLS 1.2 in BIGIP LTM
No other protocols should be disabled on the load balancer. The final result will be TLS 1.2 Enabled TLS 1.1 Enabled TLS 1.0 Enabled SSL 3.0 Enabled SSL 2.0 Enabled
My current software version : BIG-IP 11.2.1 Build 862.0 Hotfix HF2
5 Replies
this document indicates those are already supported and active if you haven't changed the default cipher string
http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13156.html
although SSLv2 isn't enabled by default and shouldn't be in my opinion.
could you please show your current cipher string used in the client SSL profile?
- Rajendran2002_1
Nimbostratus
Hi Boneyard
Thank you for the answer. I don't use any custom ciphers. just using the default ciphers in ssl profile
- then you already support most of what you say you want. if this server is reachable form the internet you can use ssl labs to double check what is supported https://www.ssllabs.com/ssltest/
- Rajendran2002_1
Nimbostratus
Thank you, this works
- if this answered your question please flag it as such.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com