Forum Discussion
johnestate_1382
Nimbostratus
NimbostratusiRule for redirecting 128bit RC4-md5 and 128bit RC4-SHA to webpage
Hello
I have been asked to deny or block 128bit RC4-md5 and 128bit RC4-SHA user reqeust, so I wrote following iRule
when HTTP_REQUEST {
log local0. "VIP connection request before if statem...
PeteWhite
Employee
EmployeeHow about you specify the ciphers available to be used in the Client SSL profile and exclude that cipher group?
https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13171.html?sr=33336842
As you say, the cipher is decided by the server so you could catch the server response, allow the SSL handshake to continue and when you see an HTTP_REQUEST then redirect it. Does that make sense?
