For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Demeter_Luo_168's avatar
Demeter_Luo_168
Icon for Nimbostratus rankNimbostratus
Nov 11, 2015

How to disable SSLv3 negotiation for the BIG-IP Configuration utility

Hi friends, I want to disable SSLv3 negotiations for the BIG-IP Configuration utility in Version 11.4.1 HF4. According to SOL17275,i have been suggested to upgrade the software version and disable SS...
deployment
design
management
security
TMSH
David_Stout's avatar
David_Stout
Icon for Nimbostratus rankNimbostratus
Nov 11, 2015

Hi,

You can also edit the ssl.conf file at /etc/httpd/conf.d/ssl.conf using VI

vi /etc/httpd/conf.d/ssl.conf

Find the following line similar to the following

SSLCipherSuite ALL:!ADH:!EXPORT56:!eNULL:!MD5:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

Replace with

SSLCipherSuite ALL:!EXPORT40:!EXP:!LOW:!SSLv3

Close VI with [ESC] :x! to save the file

Issue the following command

bigstart restart httpd

I've used this one in the past. Hopefully it will work for you too.