Forum Discussion

123notit_142916's avatar
123notit_142916
Icon for Nimbostratus rankNimbostratus
Jan 27, 2015

F5 redirect for SSLv3 connections only

I have the following irule in place -   when HTTP_REQUEST { set cipherSuite [SSL::cipher version] if { $cipherSuite equals "SSLv3" } { log local0. "SSL3 connection detected from [IP::client_addr]...
application delivery
devops
iRules
security
123notit_142916's avatar
123notit_142916
Icon for Nimbostratus rankNimbostratus
Feb 18, 2015

Wanted to answer this (sorry it took so long) but this was resolved when I noticed that the SSL profile attached to the Virtual Cert – specifically does not allow SSLv3 traffic due to the fact that its parent profile has a ‘No SSLv3’ option enabled on it, which is being inherited to the child ssl profile.

 

So best to create a separate SSL profile when testing this to ensure you don't end up wasting time trying to figure this out, like me.

 

Thanks.