Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Sep 29, 2017

ssl cipher help!

Hi, we currently use the following ssl ciphers to secure traffic to a VIP on our LTM:

 

!COMPAT:!LOW:!SSLv2:!SSLv3:!MD5:!SHA:!DES:!DHE:!EDH:!EXPORT:ECDHE:RSA:RSA+3DES:!TLSv1

 

how could we enable TLSv1.1 in this list (but not 1.0) and all others stay the same?

 

Thanks

 

LTM
security
  • P_K's avatar
    P_K
    Icon for Altostratus rankAltostratus
    Sep 29, 2017

    Looks like your cipher list only blocking TLSv1.0 not TLSv1.1. Which version of Big-IP you're running? TLSv1.1 is available from v11.x

    If you're on 11.x or above, you shouldn't be blocking TLSv1.1 unless your cipher list have 

    !TLSv1_1

    Hope this helps!