For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
Oct 14, 2016

iApp Config updates not applying

Morning all...   Been a while since I've posted on here... :)   I've got a couple of pairs of 11.6.0 F5 devices, which appear to have developed a rather strange issue with applying iApp templ...
application delivery
iApps
LTM
mikeshimkus_111's avatar
mikeshimkus_111
Historic F5 Account
Oct 14, 2016

Hi Gavin, if you manually disable SSLv3 on the profile via the tmsh command line, does the change take immediately? iApps generally use tmsh to do their work, so if you still see the issue, it's not an iApp problem.

 

Fred_Slater_856's avatar
Fred_Slater_856
Historic F5 Account
Oct 14, 2016

Galvin- In support of Mike's comment above, I would eliminate the iapp from the problem. Execute the following tmsh commands and if sslv3 traffic still flows, you have a much more concise case for F5 support.

(tmos) create ltm profile client-ssl parent1 options { no-sslv3 }
(tmos) create ltm profile client-ssl child1
(tmos) modify ltm profile client-ssl child1 defaults-from parent1