For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

OTS02's avatar
OTS02
Icon for Cirrus rankCirrus
Jul 23, 2015

monitor for adfs server (GTM)

I cannot create a https monitor for our adfs servers from the GTM. I have tried many different ciphers. Tried offering only the cipher used by my Firefox browser. Curl shows the TLS handshake soundly...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Jul 24, 2015

It seems odd that the monitor is attempting to do SSLv2. What cipher string are you using? Do you have anything in the Client Certificate field?

To verify that the monitor is or isn't trying to do SSLv2, do an ssldump capture on the server side VLAN:

ssldump -AdNn -i 0.0 port 443 and host [IP of pool member]

This should display the SSL handshake and show what ciphers and protocols each side is trying to negotiate and where it's failing.