Forum Discussion

Anil_Gupta_01_1's avatar
Anil_Gupta_01_1
Icon for Nimbostratus rankNimbostratus
Apr 22, 2015

HTTPS monitoring failing

Dear All,

 

We are facing issue with HTTPS monitoring.

 

F5 load balancing and monitoring some of the server on which SSL is disable (last week) and only TLS 1_2 version is enable.

 

Since SSL is disable on server, F5 monitoring is failing.

 

Request you to please let me know, how to create a HTTPS monitoring parameter for monitoring TLS1_2 version enabled server.

 

Regards, Anil

 

application delivery
deployment
LTM
management
monitor
performance

13 Replies

  • gsharri's avatar
    gsharri
    Icon for Altostratus rankAltostratus
    Apr 22, 2015

    You will need to configure the Cipher List in the monitor properties.

     

    See this DevCentral thread: Ciphers

     

  • cjunior's avatar
    cjunior
    Icon for Nacreous rankNacreous
    Apr 22, 2015

    Hi, if you need an SNI connection, maybe you need an external monitor

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Apr 22, 2015

    Hi Anil, I agree with Cjunior comments. Please enable external Monitor to your pool member.

     

    Or configure below cipher. Go to Profile--> SSL--> ClientSSL--> click on SSL profile--> chiper(paste below & try) !SSLv2:!EXPORT:!DH:RSA+RC4:RSA+AES:RSA+DES:RSA+3DES:ECDHE+AES:ECDHE+3DES:@STRENGTH

     

    Hope it will work for you. Please let me know if any question

     

    • Anil_Gupta_01_1's avatar
      Anil_Gupta_01_1
      Icon for Nimbostratus rankNimbostratus
      Apr 26, 2015
      can you please tell me how it will work without applying this profile to monitoring?... how to assign the created SSL profile to HTTPS monitoring??
  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Apr 22, 2015

    what version are you using? health monitor supports tls1.2 in 11.5.

     

    • Remco's avatar
      Remco
      Icon for Nimbostratus rankNimbostratus
      Dec 21, 2015
      Hi Nitass, you state that health monitors supports tls 1.2 in 11.5 does this imply that tls 1.2 is not supported in 11.4?
    • Remco's avatar
      Remco
      Icon for Nimbostratus rankNimbostratus
      Dec 21, 2015
      Hi Nitass, you state that health monitors supports tls 1.2 in 11.5 does this imply that tls 1.2 is not supported in 11.4?
  • Anil_Gupta_01_1's avatar
    Anil_Gupta_01_1
    Icon for Nimbostratus rankNimbostratus
    Apr 26, 2015

    Hi Nitass,

     

    it is not working. I followed your post and configured F5 monitor. but still it is failing..

     

    please let me know the alternate way to solve the issue.

     

    • nitass's avatar
      nitass
      Icon for Employee rankEmployee
      Apr 26, 2015
      you have to provide some detail. did bigip send tls1.2 monitor? was connection reset? who sent reset first? what did you see from tcpdump/ssldump?