Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Tom_G__134358's avatar
Tom_G__134358
Icon for Nimbostratus rankNimbostratus
Feb 11, 2014

SERVER SSL profile ciphers work fine, but not HTTPS monitor

Hi,   I'm currently implementing an LTM config with a virtual server pointing to a real server which only supports TLS 1.0 and old ciphers.   I managed to get it working using the following con...
https
security
ssl
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 14, 2014

Try the more traditional OpenSSL cipher syntax:

!SSLv2:!TLSv1.2:!TLSv1.1:!EXPORT:!DH:RSA+RC4:RSA+AES:RSA+DES:RSA+3DES:ECDHE+AES:ECDHE+3DES:@STRENGTH

Neither cURL/OpenSSL, nor apparently the monitor cipher list likes the @SPEED option, plus the underscores in the clientSSL profile need to be changed to periods.