For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ashu_2116's avatar
Ashu_2116
Icon for Nimbostratus rankNimbostratus
Mar 06, 2018

LTM TLS 1.3

Does LTM version 13.X support TLS1.3 if yes how to check that and apply to VS client ssl profiles ?  
LTM
security
laksh_373750's avatar
laksh_373750
Icon for Nimbostratus rankNimbostratus
Dec 01, 2018

@Saravanan

 

How does F5 BigIP handle Perfect Forward Secrecy in the client and server side profiles? TLS 1.3 support ephemeral keys and the keys can be changed midway during the SSL session. How would F5 BigIP be able to gain access to the ephemeral keys to decrypt the sessions? Any idea when we can get more details?

 

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Dec 03, 2018

laksh, you seem to be implying passive decryption, which isn't possible anyway. BIG-IP handles PFS as a function of the proxy architecture, terminating the TLS session on the client side, and initiating a separate TLS session on the server side.