For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kwkyiu_53019's avatar
kwkyiu_53019
Icon for Nimbostratus rankNimbostratus
Oct 20, 2014

iRule for checking connection's SSL/TLS protocol version

Hi,   In view of POODLE, we are going to disable SSLv3. And we want to find out those clients that are still using it before implementation. But it seems that there are no method to check connecti...
application delivery
devops
iRules
LTM
poodle
security
ssl
Ryannnnnnnnn's avatar
Ryannnnnnnnn
Icon for Altocumulus rankAltocumulus
Oct 20, 2014

Are you looking to gauge the number of SSLv3 requests or are you wanting to intercept the connection and do something else?

 

If it's the former, you can view statistics under Overview -> Statistics -> Local Traffic -> Statistics Type (Profile Summary) -> Client SSL

 

  • soymanue's avatar
    soymanue
    Icon for Nimbostratus rankNimbostratus
    Oct 20, 2014
    I haven't been able to find that Gauge. What version should the LTM be running?
  • kwkyiu_53019's avatar
    kwkyiu_53019
    Icon for Nimbostratus rankNimbostratus
    Oct 21, 2014
    Both v10 & v11 had it, if you want per profile stat, use "tmsh show / ltm profile client-ssl"
  • kwkyiu_53019's avatar
    kwkyiu_53019
    Icon for Nimbostratus rankNimbostratus
    Oct 21, 2014
    We are going to log those client IPs, so statistic is not we are looking for