For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Sep 29, 2017

ssl cipher help!

Hi, we currently use the following ssl ciphers to secure traffic to a VIP on our LTM:   !COMPAT:!LOW:!SSLv2:!SSLv3:!MD5:!SHA:!DES:!DHE:!EDH:!EXPORT:ECDHE:RSA:RSA+3DES:!TLSv1   how could we enab...
LTM
security
P_K's avatar
P_K
Icon for Altostratus rankAltostratus
Sep 29, 2017

Looks like your cipher list only blocking TLSv1.0 not TLSv1.1. Which version of Big-IP you're running? TLSv1.1 is available from v11.x

If you're on 11.x or above, you shouldn't be blocking TLSv1.1 unless your cipher list have 

!TLSv1_1

Hope this helps!