For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Vikash_Ramanla1's avatar
Vikash_Ramanla1
Icon for Nimbostratus rankNimbostratus
Jun 11, 2018

Logging more details when SSL handshake fails.

In our F5 setup we are using TLS 1.2 with mutual authentication. Our list of ciphers is limited to only those supported for TLS 1.2 in the clientssl profile. The issue is when a browser connects wi...
iRules
LTM
security
tls
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jun 11, 2018

Hi,

can you try this:

when CLIENTSSL_CLIENTHELLO {
    log local0. "From IP: [IP::client_addr] - cipher: [SSL::cipher name] - version: [SSL::cipher version]"
}

For more information:

https://devcentral.f5.com/wiki/iRules.SSL.ashx

regards