Forum Discussion
CirrusDisabling TLS v1.0 & v1.1 on MGMT interface for Virtual F5 Appliance
Hi,
Please provide the steps to disable TLS 1.0 and TLS 1.1 for the F5 Management Interface (TMUI). Also share the steps to apply strong ciphers to enhance security on F5 management interface.
Note: F5 in our infrastructure is Virtual Appliance in Azure. Please also let me know if in case F5 GUI access will be affected as part of the TLS version & cipher suite modification.
2 Replies
- Jeffrey_Granier
Employee
Use only TLS 1.2 on the BIG-IP GUI (Configuration utility)
To apply strong ciphers something like this should work:
modify sys httpd ssl-ciphersuite "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256"
restart sys service httpd
- Jmtaylor
Moderator
Hello Preet_pk
Have you checked this article yet,
How to disable TLS 1.0 on the self IP interface and MGMT interface
