For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Rahul_Kaul's avatar
Rahul_Kaul
Icon for Cirrus rankCirrus
Mar 14, 2020

Client Hello TLS version issue in only one Pool Member.

We have a VIP of 1.1.1.1:443 and Pool having 2 pool members(1.1.1.10:443 and 1.1.1.20:443) and currently running fine on array load balancer. Having encrypted session on both client side and server...
application delivery
LTM
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Mar 15, 2020

Hi Rahul,

 

You can restrict SSL/TLS version to TLS1.2 only and blocking rest on F5 server SSL profile then check. Setting is available as shown below under server ssl profile.

 

Making changes in these setting should resolve your issue.

 

Rahul_Kaul's avatar
Rahul_Kaul
Icon for Cirrus rankCirrus
Mar 15, 2020

Hi Mayur,

I tried your above solution when we faced the issue. In option list i selected "No TLS 1.1", still issue was persistent. Since customer had moved/routed production traffic on F5 without any pre-planned/emergency downtime, they did not give me enough time to troubleshoot the issue and routed traffic back on Array, also gave me NO troubleshooting captures and images of this technical issue they previously had.