For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

PSPK's avatar
PSPK
Icon for Nimbostratus rankNimbostratus
Dec 16, 2020

Log the TLS version of a client connecting to a TCP VIP with no HTTP or client-ssl Profile

Hello,   I have a TCP VIP on port 995 with no HTTP Profile or client-ssl profile. There are several clients that makes SSL connections to this VIP. I need to know the client SSL/TLS version. ...
application delivery
Do
iRules
LTM
security
TLS Verison
jaikumar_f5's avatar
jaikumar_f5
Icon for Noctilucent rankNoctilucent
Dec 17, 2020

Hi  ,

 

This cannot be achieved with your existing setup. You have to offload the traffic to get that information. It clearly tells you on the log error message.

 

01070394:3: CLIENTSSL_HANDSHAKE event in rule (/Common/TLS-Version-2) requires an associated CLIENTSSL profile on the virtual server (/Common/vs_exchange-2016_pop3_MWDC).