For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

daveferrier_202's avatar
daveferrier_202
Icon for Nimbostratus rankNimbostratus
Jan 15, 2019

Does BIG-IP Version 12.1.3.5 Point Release 5 support 3DES and SSLv3

Security scanning is stating the Bigip 3600 is supporting 3DES and SSLv3. I do not see this option in the cipher list. I see it defined when creating default https monitor; cipherlist DEFAULT:+SHA:+...
BIG-IP
security
daveferrier_202's avatar
daveferrier_202
Icon for Nimbostratus rankNimbostratus
Jan 16, 2019

Hi Dave. Thanks for the reply.

 

Actually they are pointing to a vip ip. and also complaining about the physical ip of the bigip.

 

I ran the tmm --clientciphers 'SSLv3' and tmm --clientciphers '3DES' and it came back with a similar response.

 

All of the ssl profiles in use are defined to use default settings.

 

I am going to try to negate the weak ciphers in specific profiles.