F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Carlos_Urdaneta's avatar
Carlos_Urdaneta
Icon for Nimbostratus rankNimbostratus
Nov 06, 2014

Determine source IP addresses of SSLv3 connections?

Hi All,   Do we have the ability to determine which specific clients (IP addresses) are connecting to the F5 with SSL v3   I know how to obtain some statistics about the number of SSLv3 connect...
application delivery
LTM
security
TMOS
David_Stout's avatar
David_Stout
Icon for Nimbostratus rankNimbostratus
Nov 07, 2014

I have a slightly more detailed logging rule that provides some additional information if required.

when HTTP_REQUEST {

if { [info exists logged] && $logged == 1 }{
     Do nothing. Already logged for this connection
} else {
    set logged 1
    log "Rule CIPHER_logging fired, from [IP::remote_addr] to vip [IP::local_addr] Cipher [SSL::cipher name]:[SSL::cipher version]:[SSL::cipher bits] Client:[HTTP::header "User-Agent"]:[HTTP::host]"
}
}