For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

joshm_46566's avatar
joshm_46566
Icon for Nimbostratus rankNimbostratus
May 08, 2015

IE8/XP compatible cipher suite

Trying to arrive at a SSL cipher suite that'll mitigate the recent vulnerabilities but still allow legacy IE8/XP clients to negotiate. We're currently on v11.6 and our suite is DEFAULT:!RSA:DHE-RSA-...
joshm_46566's avatar
joshm_46566
Icon for Nimbostratus rankNimbostratus
May 12, 2015

The string works for IE8/XP when applied to profiles that are only associated once on a virtual server. We we get the error below when trying to use it on profiles that are part of a virtual server doing SNI.

 

0107157c:3: Selected client SSL profiles do not match security policies for Virtual Server