How to disable TLSv1.1

Add the following notation to your current cipher string in the SSL profile:

:!TLSv1.1

So that might look something like this:

DEFAULT:!TLSv1.1

You need to use an underscore instead of a dot, for example

DEFAULT:!TLSv1_1

cipher string will work.

You can verify that

:!TLSv1.1

doesn't work by executing the following:

tmm --clientciphers 'DEFAULT:!TLSv1.1'

(BigIP Bash shell).

You need to use an underscore instead of a dot, for example

DEFAULT:!TLSv1_1

cipher string will work.

You can verify that

:!TLSv1.1

doesn't work by executing the following:

tmm --clientciphers 'DEFAULT:!TLSv1.1'

(BigIP Bash shell).

Use this instead to not use TLSv1.1 and TLSv1 --> 'DEFAULT:!TLSv1:!TLSv1_1'

 

tmm --clientciphers 'DEFAULT:!TLSv1:!TLSv1_1'