Forum Discussion

SP_266134's avatar
SP_266134
Icon for Nimbostratus rankNimbostratus
Mar 22, 2018

Disable TLS 1.0 VIPS - F5 VE 13.0

Hi there, I want to disable TLS 1.0 on ssl client profile. SO I did this Local Traffic -> Profiles -> SSL cleint my certificate and But when I try to test with https://www.htbridge.com/ssl/ cert and run on my vip. I still see What is the best way to disable. Am i missing a step or updating it. Should i refresh anything at the VIP level. Any pointer is appreciated.

 

application delivery
BIG-IP
LTM
  • Only1masterbla1's avatar
    Only1masterbla1
    Icon for Cirrus rankCirrus
    Mar 22, 2018

    You can configure Cipher string and verify using tmm command as per notes below:

     

    K17370: Configuring the cipher strength for SSL profiles (12.x - 13.x) https://support.f5.com/csp/article/K17370

     

    Viewing the SSL cipher order

     

    For example, to view the order of SSL ciphers used with the cipher string list DEFAULT:!TLSv1, type the following command:

     

    tmm --clientciphers 'DEFAULT:!TLSv1'