Forum Discussion

AJF5's avatar
AJF5
Icon for Altocumulus rankAltocumulus
Aug 26, 2017

Disable TLS 1.0 and 1.1 protocol on VIPS, Only TLS 1.2 should be on.

Suppose we have to disable TLS 1.0 and 1.1 protocol on a VIP. Only TLS 1.2 should be enabled.   Consider client-ssl profile is having the existing ciphers as :   ciphers DEFAULT:!ADH:!EXPORT40...
devops
LTM
  • jaikumar_f5's avatar
    jaikumar_f5
    Aug 27, 2017

    Here,

    tmsh create /ltm profile client-ssl cssl_tls12_only ciphers TLSv1_2

    Reference 

Maneesh_72711's avatar
Maneesh_72711
Icon for Cirrostratus rankCirrostratus
Aug 26, 2017

What version your LTM is on ? Modifying the SSL Profile (Client/Server) would sort this.