Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Sep 29, 2017

ssl cipher help!

Hi, we currently use the following ssl ciphers to secure traffic to a VIP on our LTM:   !COMPAT:!LOW:!SSLv2:!SSLv3:!MD5:!SHA:!DES:!DHE:!EDH:!EXPORT:ECDHE:RSA:RSA+3DES:!TLSv1   how could we enab...
LTM
security
P_K's avatar
P_K
Icon for Altostratus rankAltostratus
Sep 29, 2017

Looks like your cipher list only blocking TLSv1.0 not TLSv1.1. Which version of Big-IP you're running? TLSv1.1 is available from v11.x

If you're on 11.x or above, you shouldn't be blocking TLSv1.1 unless your cipher list have 

!TLSv1_1

Hope this helps!