Forum Discussion

dlogsdonmd's avatar
dlogsdonmd
Icon for Nimbostratus rankNimbostratus
Aug 03, 2017

Need iRule to Redirect TLS 1.0 Traffic to Maintenance Page

Hello,   We will be disabling TLS1.0 on our SSL client profiles in the cipher section using: "DEFAULT:!SSLv3:!RC4:!TLSV1"   We do still see traffic coming in though so want to create an irule t...
application delivery
iRules
LTM
Jad_Tabbara__J1's avatar
Jad_Tabbara__J1
Icon for Cirrostratus rankCirrostratus
Aug 04, 2017

Please use the following irule (copy it as it is 😄

when HTTP_REQUEST {
    if { [SSL::cipher version] eq "TLSv1" } {
       HTTP::respond 200 content [ifile get "/Common/NoTLSv10_iFile.html"] noserver "Content-Type" "text/html" "Cache-Control" "no-cache, must-revalidate" "Connection" "Close"
    } else {
      log local0. "SSL Protocol version  [SSL::cipher version]"
    }
}