For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Chris_Olson_172's avatar
Chris_Olson_172
Icon for Altostratus rankAltostratus
Jun 09, 2016

How can I find what clients are using TLS 1.0

I need to determine what clients are using TLS 1.0. My thought is to create an irule to gather the source IP of the client. I know I can view statistic with:   tmsh show ltm profile client-ssl  ...
BIG-IP
iRules
security
Chris_Olson's avatar
Chris_Olson
Icon for Nimbostratus rankNimbostratus
Jul 13, 2016

I fixed my syntax error but the rule does not work. In fact, the website failed to load altogether. Is it possible this rule won't work with 10.2.4?

 

ltm rule tls_1.0_test { when CLIENTSSL_HANDSHAKE { switch -glob [SSL::cipher version] { "1.0" - { log local0. "[IP::client_addr] Old." } } } }