Forum Discussion
iaine
Jan 15, 2020Nacreous
Hi
Something like this could be a good starting point.
when HTTP_REQUEST {
if {([SSL::cipher version] == "TLSv1.1") || ([SSL::cipher version] == "TLSv1.0")}{
log local0. "Client [IP::local_addr] is accessing [HTTP::uri] with [SSL::cipher version]"
}
}