For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Sep 29, 2017

ssl cipher help!

Hi, we currently use the following ssl ciphers to secure traffic to a VIP on our LTM:

 

!COMPAT:!LOW:!SSLv2:!SSLv3:!MD5:!SHA:!DES:!DHE:!EDH:!EXPORT:ECDHE:RSA:RSA+3DES:!TLSv1

 

how could we enable TLSv1.1 in this list (but not 1.0) and all others stay the same?

 

Thanks

 

LTM
security

1 Reply

  • P_K's avatar
    P_K
    Icon for Altostratus rankAltostratus
    Sep 29, 2017

    Looks like your cipher list only blocking TLSv1.0 not TLSv1.1. Which version of Big-IP you're running? TLSv1.1 is available from v11.x

    If you're on 11.x or above, you shouldn't be blocking TLSv1.1 unless your cipher list have 

    !TLSv1_1

    Hope this helps!