Poodle Mitigation but can't disable SSLv3

you could use the SSL::cipher version command with a default ssl version of v3, and if client is IP $x all is ok, and if not, renegotiate and force a different ssl profile. Ideas around this can be gathered in this thread.

For anyone interested, I'm using the irule below. The SSLv3 enabled profile only allows SSLv3 with RC4. The other profile has SSLv3 disabled.

when CLIENT_ACCEPTED {
if { [class match [IP::client_addr] equals "sslv3_allowed"] } {
SSL::profile sslv3_enabled
} else {
SSL::profile sslv3_disabled
}
}
when HTTP_REQUEST {
SSL::renegotiate
}