Forum Discussion
Tom_L
Nimbostratus
NimbostratusLogging TLS traffic less than TLSv1.2
I want to implement an iRule that logs TLS traffic that is less than TLSv1.2. Need to identify less secure (source) traffic to understand what applications need to be updated to TLSv1.2. The ...
Hi ,
this one works:
when HTTP_REQUEST { if {not (([SSL::cipher version] equals "TLSv1.2") or ([SSL::cipher version] equals "TLSv1.3"))} { log local0. "[virtual] [IP::client_addr] [SSL::cipher version] [HTTP::uri] [HTTP::host]" } }KR
Daniel
Daniel_Wolf
MVP
MVPHi ,
this one works:
when HTTP_REQUEST {
if {not (([SSL::cipher version] equals "TLSv1.2") or ([SSL::cipher version] equals "TLSv1.3"))} {
log local0. "[virtual] [IP::client_addr] [SSL::cipher version] [HTTP::uri] [HTTP::host]"
}
}KR
Daniel
Tom_LNimbostratus
NimbostratusThanks Daniel. I really appreciate it. I'm going to test it out tonight.
Tom L
