For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ken_B_50116's avatar
Ken_B_50116
Icon for Cirrostratus rankCirrostratus
Nov 04, 2015

Question about forcing TLS 1.2 and SOL13171

I found article SOL13171 that says to just use "TLSv1_2" in the Ciphers field, and this will force TLS 1.2. That sounds simple enough, but without also including "NATIVE" in the field, how can the e...
Ken_B_50116's avatar
Ken_B_50116
Icon for Cirrostratus rankCirrostratus
Nov 05, 2015

Currently the profile is just default.

How is 

TLSv1_2
functionally different than 
DEFAULT:!TLSv1:!TLSv1_1
? The SOL article says to use just 
TLSv1_2
, but you suggestion makes more sense because it's starting with the default suites and then stripping out the bad TLS versions.

Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Nov 05, 2015
https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13156.html