For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eric_Van's avatar
Eric_Van
Icon for Nimbostratus rankNimbostratus
May 07, 2014

Determine if users are connecting TLS or SSLv3

I'm running an LTM, version 11.4.1, that handles client-side SSL termination. I recently tried removing SSLv3 from a few of my sites, to force connections over TLS, but had several users complain, as they did not have TLS enabled in their browsers. I ended up turning SSLv3 back on, but now I need to know: Is there any logging or report that can show me how many / what percentage of connections are resolving to TLS versus SSLv3 for a particular virtual server?

 

application delivery
LTM
management

2 Replies

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    May 07, 2014

    You can't do this on a per VS basis but for global statistics use this menu path: Menu Path: Statistics > Module Statistics > Local Traffic > Statistics Type: Profiles Summary > Client SSL.

     

  • Toby_Garcia_146's avatar
    Toby_Garcia_146
    Icon for Altostratus rankAltostratus
    Oct 16, 2014

    These statistics can also be seen from the CLI:

    tmsh show /ltm profile [client-ssl|server-ssl]

    To reset the stats:

    tmsh reset-stats /ltm profile [client-ssl|server-ssl]