Forum Discussion

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus
Feb 22, 2023

How to disable only TLS v1 & TLS v1.1 on specific virtual server

Hi all, Could you help me how to disable only TLS v1 & TLS v1.1 on specific virtual server and no to entire ssl profile. Thank you in advance,
cloud
devops
security
  • mihaic's avatar
    mihaic
    Feb 22, 2023

    try this irule:

    when CLIENT_ACCEPTED {
        SSL::profile vip_ssl_no_TLSv1
    }

     where vip_ssl_no_TLSv1 is another SSL profile  where you disable whatever you want.

    I tested with this cipher string : DEFAULT:!TLSv1:!TLSv1_1

  • Cpet's avatar
    Cpet
    Icon for Altocumulus rankAltocumulus
    Feb 22, 2023

    Hi Mihaic,

    Thanks for your responce.
    I have allready read the suggested article but i want to disable TLS v1 & TLS v1.1 only on a specific virtual server without disable TLS v1 & TLS v1.1 in the SSL profile.Is it possible with an irule for example?

     

    • P_Kueppers's avatar
      P_Kueppers
      Icon for MVP rankMVP
      Feb 22, 2023

      Create a new SSL-Profile and use your current one as parent. Then deactivate tls1/1.1 and put this on the virtual server. 

      • Cpet's avatar
        Cpet
        Icon for Altocumulus rankAltocumulus
        Feb 22, 2023

        Hi,
        Correct , but i don't want to create a lot of SSL profiles.Also I wanted to know if it was possible to do it with an irule.

        Thanks.