Forum Discussion

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus
Feb 22, 2023

How to disable only TLS v1 & TLS v1.1 on specific virtual server

Hi all, Could you help me how to disable only TLS v1 & TLS v1.1 on specific virtual server and no to entire ssl profile. Thank you in advance,
cloud
devops
security
  • mihaic's avatar
    mihaic
    Feb 22, 2023

    try this irule:

    when CLIENT_ACCEPTED {
        SSL::profile vip_ssl_no_TLSv1
    }

     where vip_ssl_no_TLSv1 is another SSL profile  where you disable whatever you want.

    I tested with this cipher string : DEFAULT:!TLSv1:!TLSv1_1

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus

Hi Mihaic,

Thanks for your responce.
I have allready read the suggested article but i want to disable TLS v1 & TLS v1.1 only on a specific virtual server without disable TLS v1 & TLS v1.1 in the SSL profile.Is it possible with an irule for example?

 

P_Kueppers's avatar
P_Kueppers
Icon for MVP rankMVP
Feb 22, 2023

Create a new SSL-Profile and use your current one as parent. Then deactivate tls1/1.1 and put this on the virtual server. 

  • Cpet's avatar
    Cpet
    Icon for Altocumulus rankAltocumulus
    Feb 22, 2023

    Hi,
    Correct , but i don't want to create a lot of SSL profiles.Also I wanted to know if it was possible to do it with an irule.

    Thanks.