ltmClientSslStatActiveHandshakeRejected for each ssl profile

Hello SlashLinux.

You could collect SSL Handshakes info from your TMSH stats.

root@(bigip)(cfg-sync Standalone)(Active)(/Common)(tmos)# show ltm profile client-ssl CSSL_profile | grep shake
Certificates/Handshakes
  Mid-Connection Handshakes                                         0
  Secure Handshakes                                                 0
  Current Active Handshakes                                         0
  Insecure Handshakes Accepted                                      0
  Insecure Handshakes Rejected                                      0
  Extended Master Secret Handshakes                                 0
  Handshake Failures                                                0
  Active Handshakes Rejected                                        0
  Bypasses By Handshake Alert                                       0
  Verified Handshake Count                                          0
  Connection mirror handshake success                               0

After that, you could create a Custom MIB using this:

https://support.f5.com/csp/article/K13596

Regards,

Dario.