Forum Discussion
Gustavo_Lazarte
Nimbostratus
NimbostratusDisable SSL 2.0
According to our security Auditor we need to disable SSl 2.0 support and support SSL 3.0 or TLS 1.0 instead. I have not found a place in the Client ssl to set this up. I found the following values in ...
hoolio
Cirrostratus
CirrostratusYou could also use an iRule to check the cipher used and redirect clients to a warning page explaining why they're being blocked if they don't meet your criteria. Here is an example:
Redirect On Weak Encryption (Click here)
The downside to using the client SSL profile options to do this is the client simply gets a TCP reset resulting in a 'page cannot be displayed' error in the browser.
Aaron
