Forum Discussion

vj_singh_177738's avatar
vj_singh_177738
Icon for Nimbostratus rankNimbostratus
Dec 09, 2014

need to disable SSLv3 on F5 LTM version 10.2.3 and 11.4.1

Hi, I would like to know if I disable sslv3 in ciphers "DEFAULT:!SSLv3", would it impact our clients in accessing applications/urls.   want to be sure before implementing.  
LyonsG_85618's avatar
LyonsG_85618
Icon for Cirrostratus rankCirrostratus
Dec 10, 2014

It WILL stop users/clients that can only use SSLv3 from connecting to your virtual server.

 

Try looking at ClienTSSL stats to show percentage of SSLv3 connections - it shoudln't be many.

 

p.s. we applied an iRule that would send a response back to client advising them to upgrade browser.