Forum Discussion
chungyu_16122
Altostratus
Jul 27, 2015Detect SSLv3 and Create a list of incoming IP addresses using SSLv3
Hi all
I currently unable to migrate all services away from SSLv3 due to some legacy applications. I have created an iRule which allowed me to look at a Data Group list and send users to a SSLv...
Kevin_Stewart
Employee
Jul 27, 2015You should already have what you're looking for with the exception of an additional log line:
when CLIENT_ACCEPTED {
log local0. "[IP::client_addr]"
if { [class match [IP::client_addr] equals SSLv3_Client] } {
log local0. "Incoming SSLv3 client: [IP::client_addr]"
SSL::profile ADC_LDAP_SSL3
} else {
SSL::profile ADC_LDAP
}
}
or are you trying to log all clients that establish an SSLv3 connection (versus what's defined in the datagroup)?
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects