For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jeff_Williams_4's avatar
Jeff_Williams_4
Icon for Nimbostratus rankNimbostratus
Jun 24, 2014

Disable Supported Elliptic Curves Extension from server

Hi, We see that our F5 load balancer running BIG-IP 11.5.1 Build 2.0.121 Hotfix HF2, is sending the extension for "elliptic curves" (id=10). For example, this is an extract from a debug using the c...
management
security
afedden_1985's avatar
afedden_1985
Icon for Cirrus rankCirrus
Jun 25, 2014

I got some info on this, you can build a new client ssl profile and under advanced for cipher add an exclude to exclude the ECDHE ciphers In my 11.2 box it looks like this DEFAULT:!ADH:!EXPORT40:!EXP:!LOW:!ECDHE I added :!ECDHE That should explude the ECDHE ciphers. then apply the profile to your VIP or I guess if you wanted you could do that to your existing client ssl profile