Forum Discussion

Nimbostratus

Oct 14, 2014

F5 V10.2.1 and Windows 2012R2 compatibility

Hi Guys,

I got a virtual server with serverside ssl default profile being used. With a pool of Windows 2012r2 iis servers.

When serverside ssl default profile is used, javascript, asp and some images refuse to load. As soon I remove serveside ssl and change port of servers to http, everything works fine.

Anyone know of any compatibility issues with Windows 2012r2 and BIGIP LTM 10.2.1?

availability

BIG-IP Access Policy Manager (APM)

deployment

management

security

2 Replies

Lazar_92526
Nimbostratus
Oct 15, 2014
Ran across some issues with version 11.4.1 with 2012r2 on the serverside SSL profile. We had to adjust the ciphers to the following to get it to work.

DEFAULT:!TLSv1_2:!TLSv1_1
- Ed_Hough_26115
  Nimbostratus
  Apr 14, 2015
  I've encountered the same issue running 11.4.0 with 2012 R2 and this cipher combination appears to work. But does anyone know how? We have our 2012 R2 pool configured to "Best Practice", which ONLY allows TLS1.2 with AES256 and ECDHE384. If DEFAULT:!TLSv1_2:!TLSv1_1 removes TLS1.2, how does this work?