Forum Discussion
chungyu_16122
Altostratus
Jul 27, 2015Detect SSLv3 and Create a list of incoming IP addresses using SSLv3
Hi all
I currently unable to migrate all services away from SSLv3 due to some legacy applications. I have created an iRule which allowed me to look at a Data Group list and send users to a SSLv...
Kevin_Stewart
Employee
Jul 27, 2015You should already have what you're looking for with the exception of an additional log line:
when CLIENT_ACCEPTED {
log local0. "[IP::client_addr]"
if { [class match [IP::client_addr] equals SSLv3_Client] } {
log local0. "Incoming SSLv3 client: [IP::client_addr]"
SSL::profile ADC_LDAP_SSL3
} else {
SSL::profile ADC_LDAP
}
}
or are you trying to log all clients that establish an SSLv3 connection (versus what's defined in the datagroup)?
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects