For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ørjan's avatar
Ørjan
Icon for Nimbostratus rankNimbostratus
Jun 10, 2016

Handshake fails with error TLS_FALLBACK_SCSV with a lower protocol (86)

Usually handshake failures are caused by no cipher suite overlap between our Big-IP and the target server, but this one is different. I see in a packet capture that on the external side Big-IP sends ...
BIG-IP
devops
LTM
security
David_Stout's avatar
David_Stout
Icon for Nimbostratus rankNimbostratus
Jun 10, 2016

My first hunch was that someone was attempting a protocol downgrade attack. Quick google turned up this link which probably explains what you are seeing above :)

 

Poodle Downgrade attacks and TLS SCVS