Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Sep 29, 2017

ssl cipher help!

Hi, we currently use the following ssl ciphers to secure traffic to a VIP on our LTM:

 

!COMPAT:!LOW:!SSLv2:!SSLv3:!MD5:!SHA:!DES:!DHE:!EDH:!EXPORT:ECDHE:RSA:RSA+3DES:!TLSv1

 

how could we enable TLSv1.1 in this list (but not 1.0) and all others stay the same?

 

Thanks

 

1 Reply

  • P_K's avatar
    P_K
    Icon for Altostratus rankAltostratus
    Sep 29, 2017

    Looks like your cipher list only blocking TLSv1.0 not TLSv1.1. Which version of Big-IP you're running? TLSv1.1 is available from v11.x

    If you're on 11.x or above, you shouldn't be blocking TLSv1.1 unless your cipher list have 

    !TLSv1_1

    Hope this helps!