For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Olson_172's avatar
Chris_Olson_172
Icon for Altostratus rankAltostratus
Jun 09, 2016

How can I find what clients are using TLS 1.0

I need to determine what clients are using TLS 1.0. My thought is to create an irule to gather the source IP of the client. I know I can view statistic with:   tmsh show ltm profile client-ssl  ...
BIG-IP
iRules
security
R_Marc's avatar
R_Marc
Icon for Nimbostratus rankNimbostratus
Jun 09, 2016

you can do it in an iRule pretty easily:

when CLIENTSSL_HANDSHAKE {
        switch -glob [SSL::cipher version] {
                "*1.1*" -
                "*1.2*" {
                        log local0. "[IP::client_addr] Good guy."
                }
                default {
                        log local0. "[IP::client_addr] is a horrible ludite."
                }

        }
}