For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

James_Thomson_0's avatar
James_Thomson_0
Historic F5 Account
Jan 07, 2015

Are you still using the NATIVE SSL stack or did you change to COMPAT in the SSL profile? https://support.f5.com/kb/en-us/solutions/public/13000/200/sol13213.html

 

I think this confirms that:

 

https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html

 

Looking at that solution, it has a command to run and verify that AES-GCM is in your NATIVE, but in 11.6 it is. If you do a "show ltm profile client-ssl can you tell which ciphers are mostly being used now that may be more efficient?