Forum Discussion

bsm1970's avatar
bsm1970
Icon for Nimbostratus rankNimbostratus
Mar 19, 2019

Block page for TLSv1.x or SSL connections

We have a web page/application that we want to reject connections from any client not using at least TLSv1.2. The way we were planning on doing that was to do this in IIS on the server. It would di...
application delivery
blocking page
iRules
LTM
security
ssltls
Rico's avatar
Rico
Icon for Cirrus rankCirrus
Mar 19, 2019
when CLIENTSSL_HANDSHAKE {
    if { ( [SSL::cipher version] ne "TLSv1.2" ) } {
        set invalid_ssl 1
    } else {
        set invalid_ssl 0
    }
}
when HTTP_REQUEST {
    if { $invalid_ssl } {
        HTTP::redirect "http://www.example.com/upgradetls"
        TCP::close
    }
}

Here is an iRule from this article. This should suit your needs. You can also serve a custom response with an iFile

If you have any more questions, I am sure I can help