Forum Discussion

Korai_331784's avatar
Korai_331784
Icon for Altostratus rankAltostratus
Jan 08, 2019

F5 SSL Profile

Hi,   I am working on F5 Vulnerabilities and needs to disable SSL/TLS older versions and to enable only TLS1.2. I have SSL profile but can see "All Option disabled" setting so what does this means...
BIG-IP
LTM
security
RaghavendraSY_7's avatar
RaghavendraSY_7
Icon for Cumulonimbus rankCumulonimbus
Jan 09, 2019

Try adding below ciphers in the SSL client profile and test it.

 

TLSv1_2:!DES:!3DES:!RC4:!ADH

 

  • Korai_331784's avatar
    Korai_331784
    Icon for Altostratus rankAltostratus
    Jan 09, 2019

    Hi Thanks,

     

    But this above Cipher have TLSV1 which we dont needs to allow.

     

    But what If I select No SSLv1, No SSLv2 and No SSLv3 and similar for No TLSv1.0, No TLSv1.1 under the enabled options.

     

    will this do the same trick or still i needs to change Ciphers