For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

SJoshi_230759's avatar
SJoshi_230759
Icon for Nimbostratus rankNimbostratus
Jul 28, 2016

Getting "server is vulnerable to a BEAST attack" message in SSL checker

Hi All, We have upgraded our SSL cert from SHA-1 to SHA-2. We have disabled both SSLv3 & RC4 in ciphers suit. After upgraded one of our VIP with new SSL cert, I have checked in SSL checker to determi...
application delivery
LTM
boneyard's avatar
boneyard
Icon for MVP rankMVP
Jul 28, 2016

go to https://www.ssllabs.com/ssltest/ enter the website, click the don't show on the board and give the result here, take out your website name if you don't want to.

as for the your current string it excludes some stuff but depending on the version those are already excluded by default. which version are you running?

try running: 

tmm --clientcipher 'DEFAULT:!SSLv3:!RC4'
on the big-ip

and post the output