Issue with Apple IOS10

Hi! We are seeing that F5 is dropping SSL Sessions from Apple IOS 10 (available since 09/13, ten days ago).

 

After check it with a tcpdump, we are seeing the client is proposing in the ClientHello message the Cipher TLS_EMPTY_RENEGOTIATION_INFO_SCSV, that in RFC 5746 explicity is documented the server must reject it:

 

"When a ClientHello is received, the server MUST verify that it does not contain the TLS_EMPTY_RENEGOTIATION_INFO_SCSV SCSV. If the SCSV is present, the server MUST abort the handshake."

 

So, waiting for an Apple Fix, is there any workaround we can configure in F5? As an instance, can F5 disable SSL renegotiation?

 

Thanks!