For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JD_Tomzak's avatar
JD_Tomzak
Icon for Cirrus rankCirrus
Jan 14, 2020

Irule to help root out TLS 1.0 and 1.1 connecting clients?

Hello,   I've been asked to assist the dev team in removing TLS 1.0 and 1.1 from our internet facing applications. In order to figure out what clients are still accessing at this level I've been ...
BIG-IP
iRules
security
iaine's avatar
iaine
Icon for Nacreous rankNacreous
Jan 15, 2020

Hi

Something like this could be a good starting point.

when HTTP_REQUEST {
 
if {([SSL::cipher version] == "TLSv1.1") || ([SSL::cipher version] == "TLSv1.0")}{
    log local0. "Client [IP::local_addr] is accessing [HTTP::uri] with [SSL::cipher version]"
    }
}