Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

vvskaladhar_488's avatar
vvskaladhar_488
Icon for Nimbostratus rankNimbostratus
Nov 30, 2016

How to disable TLSv1.1

HI All,   in SSL client ciphers TLSv1 is disabling TLSv1.0 but not TLSv1.1 , Can some one please let me know what should i add to disable TLSv1.1 ?  
application delivery
big-ip
LTM
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
Nov 30, 2016

You need to use an underscore instead of a dot, for example 

DEFAULT:!TLSv1_1
cipher string will work.

You can verify that 

:!TLSv1.1
doesn't work by executing the following: 
tmm --clientciphers 'DEFAULT:!TLSv1.1'
(BigIP Bash shell).

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Nov 30, 2016

    Good catch. ;)