Forum Discussion

sloehandman's avatar
sloehandman
Icon for Nimbostratus rankNimbostratus
May 07, 2020

Capture SSL Profile Protocol Stats per Virtual Server

We are on Version 13.1 LTM

 

If you are familiar with the output of the "show ltm profile client-ssl" command, I want to produce the same output on a per VIP basis. Or at least get the Protocol & Ciphers stats per Virtual Server. I know this is in the GUI but I want CLI output.

 

Any suggestions?

application delivery
BIG-IP
BIG-IQ
  • Samir's avatar
    Samir
    Icon for MVP rankMVP
    May 08, 2020

    Try below command​.

    ​

    show ltm profile client-ssl <profile_name> raw

    ​write bash script to automate all vips' clientssl cipher states.

    ​

  • jaikumar_f5's avatar
    jaikumar_f5
    Icon for Noctilucent rankNoctilucent
    May 08, 2020

     ,

    Here's what I use for my auditing work, a simple neat and clean.

    Codeshare of it...

    #!/bin/bash
echo "Virtual Server, Client-SSL Profile, SSLv2, SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, DTLS" > client-ssl-output.csv
profile_names=`tmsh list ltm profile client-ssl one-line | awk -F" " '{print $4}'`
for x in ${profile_names}
do
virtual_name=`tmsh list ltm virtual one-line | grep $x | awk -F" " '{print $3}'`
if [ "${virtual_name}" != "" ]
then
cmd=`tmsh show ltm profile client-ssl $x | grep Version | awk -vORS=, '{ print $5 }'`
for y in ${virtual_name}
do
echo "$y,$x,$cmd" >> client-ssl-output.csv
done
fi
done