Forum Discussion

Dez's avatar
Dez
Icon for Nimbostratus rankNimbostratus
Dec 07, 2020

Is there a way on F5 to disable rsa_pss* signature algorithms?

I am having an issue with SSL decryption on my Palo Alto firewall in front of F5. It works with Internet Explorer, but not Firefox or Chrome. According to Palo Alto TAC, the issue is certain signatur...
LTM
security
jaikumar_f5's avatar
jaikumar_f5
Icon for Noctilucent rankNoctilucent
Dec 08, 2020

Yes this is doable from what I've learnt from articles. For this your Bigip needs to be on 14.x or above.

Beginning in 14.x you have the option to use Cipher Rule, where you can specify the list of signature algorithm for negotiation's.

 

Other than that, I dont see a method to achieve this.