F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Stewart's avatar
Stewart
Icon for Altostratus rankAltostratus
Oct 15, 2014

CVE-2014-3566 POODLE Vulnerablity fix. Which browsers will be impacted?

Hi,

 

I need to implement the workaround for this vulnerability, however I'd like to be able to identify which browsers will no longer be able to access our sites.

 

Is there a reference document gives this infomation?

 

Thanks Stewart.

 

application delivery
LTM
management
security

4 Replies

  • Vitaliy_Savrans's avatar
    Vitaliy_Savrans
    Icon for Nacreous rankNacreous
    Oct 15, 2014

    Hi,

     

    POODLE affects older standards of encryption, specifically Secure Socket Layer (SSL) version 3. It does not affect Transport Socket Layer (TLS). Disabling the SSL 3.0 will avoid it.

     

  • Stewart's avatar
    Stewart
    Icon for Altostratus rankAltostratus
    Oct 15, 2014

    Thanks Vitaily,

     

    That's what I plan to do. My question was more around which browser users I'll chop off when I do it.

     

    I think that IE6 users will have issues.

     

  • Stewart's avatar
    Stewart
    Icon for Altostratus rankAltostratus
    Oct 15, 2014

    Thanks jgranieri the table is just what I need.

     

    Nathan and Vitali, Thanks for your comments.

     

  • Andy_Litzinger's avatar
    Andy_Litzinger
    Oct 15, 2014

    Hi Stewart, you might find this list from Mozilla helpful: https://wiki.mozilla.org/Security/Server_Side_TLSRecommended_configurations