Forum Discussion
Ahmad_Al-Zubi_3
Nimbostratus
NimbostratusBlocking certain TLS versions and Ciphers from Management Access on F5
Hello,
I need to block TLS v1, and v1.1 in Management access, in addition to static-key-ciphers. but am not sure of the syntax, as follows:
tmsh modify /sys httpd ssl-ciphersuite 'ALL:!TLSv1_1:!TLSv1:!DES:!IDEA:!3DES:!RC4'.
or
modify /sys httpd ssl-ciphersuite 'DEFAULT:!TLSv1_1:!TLSv1:!DES:!IDEA:!3DES:!RC4'
save /sys config
- Kevin_Stewart
Employee
Per: K13400: SSL 3.0/TLS 1.0 vulnerability CVE-2011-3389 and TLS protocol vulnerability CVE-2012-1870:
tmsh modify /sys httpd ssl-ciphersuite 'ALL:!ADH:!EXPORT:!eNULL:!MD5:!DES:!SSLv2:!SSLv3:!TLSv1:!TLSv1_1'
