For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PiotrL's avatar
PiotrL
Icon for Cirrus rankCirrus
Apr 03, 2019

Forcing TLSv1_2 in the SSL Server Profile

Is it possible to configure SSL Server Profile so connectins from bigip started with TLSv1_2 ?   I tried to put in a ciphers field: TLSv1_2, but connections are still TLSv1, although in the client...
application delivery
LTM
ssltls
youssef_100679's avatar
youssef_100679
Icon for Nimbostratus rankNimbostratus
Apr 04, 2019

Hi,

 

You can force tls1.2, on the other hand if the client does not support tls1.2, it risks to receive a reset...

 

So in order to force tls1.2 follow the below steps:

 

  • open your ssl client profile.
  • move configuration from basic to advanced in order to see all functionnality
  • Check "Options" -> "Options List"
  • Then from "Available Options", remove TLS, TLS1, TLS1.1

the only alternative that the client will have is the tls1.2.

 

Regards