For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

gdoyle's avatar
gdoyle
Icon for Cirrostratus rankCirrostratus
May 19, 2016

Custom Response Upon Denial with iRule.

We created an irule which denies a user access if they are not using TLS 1.1 or greater (so TLS1.0 or no TLS). We would like a custom message, and although it is in the iRule, that is not the message...
BIG-IP
irule
security
gdoyle's avatar
gdoyle
Icon for Cirrostratus rankCirrostratus
May 24, 2016

I'm not sure exactly how to code for ifiles... (Or irules, to be fair), but would something like this work?

 

when HTTP_REQUEST {
    if { not ([SSL::cipher version] starts_with "TLSv1.") } {
        ifile get } Content-Type text/html Connection close
    }
}