For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jibinpv_254622's avatar
Jibinpv_254622
Icon for Nimbostratus rankNimbostratus
Jul 26, 2017

Enforce TLS1.0 & TLS1.1 to TLS1.2

Hi Team,   We have a scenario on our set up where we are accepting only TLS 1.2 connections to the applications and denies all other TLS.This we are doing via irule.   However Is there a way we...
application delivery
iRules
LTM
Ilian_Ivanov's avatar
Ilian_Ivanov
Icon for Nimbostratus rankNimbostratus
Jul 27, 2017

Hello,

 

I dont think that you need iRule to achieve that. You can simply change the ciphers in your clientssl profile.

 

Example: Use "TLSv1_2" for your clientssl cipher and you will force F5 to negotiate with the clients only with TLSv1.2. In that way you don`t need to redirect anything :)

 

If I understood you correctly this will work for you.

 

Regards