For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Hardi's avatar
Hardi
Icon for Nimbostratus rankNimbostratus
Sep 01, 2019

iRule_TLS

Hi,   much appreciate your guidance to achieve the following through iRule; 1- at the TCP level; iRule read the payload and find the client hello header. 2- then search for extension of 229938,...
BIG-IP
devops
iRules
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Sep 02, 2019

You can use the binary scan command to check the SSL header. I'm confused though - how can you remove the extension from the SSL header? that is quite literally a MITM attack which is what SSL is designed to prevent.