For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Lupo_38935's avatar
Lupo_38935
Icon for Nimbostratus rankNimbostratus
Nov 06, 2009

mitigating the TLS client-initiated renegotiation MITM attack

I thought I'd share the iRule we use to mitigate one of the recently disclosed TLS attacks. Our focus lies on preventing the possible malicious data insertion during 'client-initiated renegotiation'. ...
application delivery
dev
devops
iRules
zoltak_114069's avatar
zoltak_114069
Icon for Nimbostratus rankNimbostratus
Jun 08, 2010
We didn't pass the PCI DSS scanning with BIG-IP v 9.4.5 and the iRule for this version.

 

 

We updated to BIG-IP v 9.4.8 HF3 and the iRule for this version. The behaviour is the same as observed on http://blog.ivanristic.com/2009/12/testing-for-ssl-renegotiation.html

 

 

I will let you know if BIG-IP v 9.4.8 HF3 passes the PCI scanning this time.