Forum Discussion

rsbs01's avatar
rsbs01
Icon for Nimbostratus rankNimbostratus
Sep 25, 2018

Changing parent profile to VIP with multiple client-ssl profiles

Hi everybaody.   I have created new profile, that defaults from client-ssl. The only thing that I changed in that new profile was to exclude some ciphers => DEFAULT:!TLSv1:!RC4. I wanted to assin...
BIG-IP
LTM
security
h_elyot's avatar
h_elyot
Icon for Nimbostratus rankNimbostratus
Aug 05, 2019

Hello Martijn,

 

Do you know how I can modify the parent profile of multiple SSL clients on the same VS at once, in order to modify the cipher from the default one of client ssl parent profile to an no CBC client ssl parent profile that I have created for all of them ?

 

Cause, when I modify and try to update one, I have the error message you describe here above.

 

Regards

canttalkeating's avatar
canttalkeating
Icon for Altocumulus rankAltocumulus
Dec 14, 2019

Hello h.elyot,

 

I doesn't look like you can change the cipher values at the parent level and have them propagate down to all child SSL profiles dependent on that parent.

 

You can change other attributes within the Client SSL Parent profile that will be reflected in the child profiles but not the ciphers.

 

I wouldn't recommend ever changing the default values of any BIG-IP profiles as a best practice

 

Cheers,

 

David