Forum Discussion

PiotrL's avatar
PiotrL
Icon for Cirrus rankCirrus
Apr 03, 2019

Forcing TLSv1_2 in the SSL Server Profile

Is it possible to configure SSL Server Profile so connectins from bigip started with TLSv1_2 ?   I tried to put in a ciphers field: TLSv1_2, but connections are still TLSv1, although in the client...
application delivery
LTM
ssltls
youssef_100679's avatar
youssef_100679
Icon for Nimbostratus rankNimbostratus
Apr 04, 2019

Hi,

 

You can force tls1.2, on the other hand if the client does not support tls1.2, it risks to receive a reset...

 

So in order to force tls1.2 follow the below steps:

 

  • open your ssl client profile.
  • move configuration from basic to advanced in order to see all functionnality
  • Check "Options" -> "Options List"
  • Then from "Available Options", remove TLS, TLS1, TLS1.1

the only alternative that the client will have is the tls1.2.

 

Regards