Forum Discussion
123notit_142916
Nimbostratus
Jan 27, 2015F5 redirect for SSLv3 connections only
I have the following irule in place -
when HTTP_REQUEST { set cipherSuite [SSL::cipher version] if { $cipherSuite equals "SSLv3" } { log local0. "SSL3 connection detected from [IP::client_addr]...
123notit_142916
Nimbostratus
Feb 18, 2015Wanted to answer this (sorry it took so long) but this was resolved when I noticed that the SSL profile attached to the Virtual Cert – specifically does not allow SSLv3 traffic due to the fact that its parent profile has a ‘No SSLv3’ option enabled on it, which is being inherited to the child ssl profile.
So best to create a separate SSL profile when testing this to ensure you don't end up wasting time trying to figure this out, like me.
Thanks.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects