Forum Discussion

cymru81's avatar
cymru81
Icon for Altocumulus rankAltocumulus
Sep 29, 2017

ssl cipher help!

Hi, we currently use the following ssl ciphers to secure traffic to a VIP on our LTM:   !COMPAT:!LOW:!SSLv2:!SSLv3:!MD5:!SHA:!DES:!DHE:!EDH:!EXPORT:ECDHE:RSA:RSA+3DES:!TLSv1   how could we enab...
LTM
security
P_K's avatar
P_K
Icon for Altostratus rankAltostratus
Sep 29, 2017

Looks like your cipher list only blocking TLSv1.0 not TLSv1.1. Which version of Big-IP you're running? TLSv1.1 is available from v11.x

If you're on 11.x or above, you shouldn't be blocking TLSv1.1 unless your cipher list have 

!TLSv1_1

Hope this helps!