For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Matt_Kivela's avatar
Matt_Kivela
Icon for Nimbostratus rankNimbostratus
Jul 31, 2017

Log client IP with ssl handshake failure?

BIG-IP v12.1.2 (Build 1.0.271) One of the new features is to automatically log SSL Handshake Failures, which sounded great. When I tested it this was the entry made in /var/log/ltm: Jul 31 08...
LTM
security
amintej's avatar
amintej
Icon for Cirrus rankCirrus
Jul 31, 2017

If you want to see source IP, you need to configure Info or Debug level for SSL. System > Logs > Configuration > SSL. Once it is enabled you will see a message similar to this in the ltm file:

 

SSL Handshake failed for TCP 192.168.174.16:49678 -> 192.168.33.72:443

 

After troubleshooting your problem, it is recommended disabled debug logging. Please check:https://support.f5.com/csp/article/K15292