For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus
Feb 22, 2023
Solved

How to disable only TLS v1 & TLS v1.1 on specific virtual server

Hi all, Could you help me how to disable only TLS v1 & TLS v1.1 on specific virtual server and no to entire ssl profile. Thank you in advance,
cloud
devops
security
  • mihaic's avatar
    mihaic
    Feb 22, 2023

    try this irule:

    when CLIENT_ACCEPTED {
        SSL::profile vip_ssl_no_TLSv1
    }

     where vip_ssl_no_TLSv1 is another SSL profile  where you disable whatever you want.

    I tested with this cipher string : DEFAULT:!TLSv1:!TLSv1_1

mihaic's avatar
mihaic
Icon for MVP rankMVP
Feb 22, 2023

try this irule:

when CLIENT_ACCEPTED {
    SSL::profile vip_ssl_no_TLSv1
}

 where vip_ssl_no_TLSv1 is another SSL profile  where you disable whatever you want.

I tested with this cipher string : DEFAULT:!TLSv1:!TLSv1_1

  • Cpet's avatar
    Cpet
    Icon for Altocumulus rankAltocumulus
    Feb 22, 2023

    It works!
    Thank you for your support.