For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thiago_Morais's avatar
Thiago_Morais
Icon for Altostratus rankAltostratus
Dec 28, 2020

Redirect TLS1.0 to TLS1.2

I need to configure a VS to accept client requests using TLS1.0 and forward them to a pool using TLS1.2. How is the best way to configure this scenario?   Thanks! TM
application delivery
BIG-IP
LTM
Thiago_Morais's avatar
Thiago_Morais
Icon for Altostratus rankAltostratus
Dec 29, 2020

There is a legacy application that can't support the most recent TLS version and nobody want to upgrade it because there is no support from the vendor.

 

I will schedule a maintenance window to create the new VS with two different SSL profiles. In the SSL Client profile, I will use the DEFAULT ciphers but in the SSL Server profile, I will use the specific ciphers that support TLS1.2.

 

Thank you for your opinions, I let you know when I apply the configuration and make some tests.

 

Regards,

TM