For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dlogsdonmd's avatar
dlogsdonmd
Icon for Nimbostratus rankNimbostratus
Aug 03, 2017

Need iRule to Redirect TLS 1.0 Traffic to Maintenance Page

Hello,   We will be disabling TLS1.0 on our SSL client profiles in the cipher section using: "DEFAULT:!SSLv3:!RC4:!TLSV1"   We do still see traffic coming in though so want to create an irule t...
application delivery
iRules
LTM
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Aug 03, 2017

Hello,

Try the following irule 

when HTTP_REQUEST {
    if { [SSL::cipher version] eq "TLSv1" } {

        HTTP::respond 200 content {
          
             
                Apology Page
             
                
                    We are sorry, but the site you are looking for is temporarily out of service
                    If you feel you have reached this page in error, please try again.
                
          
        }
    } else {
      log local0. "SSL Protocol version  [SSL::cipher version]"
    }
}

Hope it helps

Regards