Forum Discussion
123notit_142916
Nimbostratus
Jan 27, 2015F5 redirect for SSLv3 connections only
I have the following irule in place -
when HTTP_REQUEST { set cipherSuite [SSL::cipher version] if { $cipherSuite equals "SSLv3" } { log local0. "SSL3 connection detected from [IP::client_addr]...
Michael_Jenkins
Cirrostratus
Jan 27, 2015If you add a line to log the ciphersuite and test with IE, do you see the SSLv3 coming through or a different log message?
when HTTP_REQUEST {
set cipherSuite [SSL::cipher version]
log local0. "Cipher Suite: $cipherSuite"
if { $cipherSuite equals "SSLv3" } {
log local0. "SSL3 connection detected from [IP::client_addr] for [virtual name]"
HTTP::redirect "https://sslv3help.com"
TCP::close
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects