Forum Discussion

Dale_Cooke_1773's avatar
Dale_Cooke_1773
Icon for Nimbostratus rankNimbostratus
Nov 19, 2015

SSL Cipher (reporting, graphing, logging)

We are in the process of disabling weaker Cipher strengths on our https servers, I wondered if anyone has any experience of getting the F5 to log and report on the Cipher strength that each browser s...
iRules
LTM
security
Dale_Cooke_1773's avatar
Dale_Cooke_1773
Icon for Nimbostratus rankNimbostratus
Nov 19, 2015

All very useful answers, thanks very much for everyone's input. Just got to decide weather to move the SSL to the F5 or not now..

 

Thanks again

 

Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Nov 19, 2015
Even if you want to still have SSL to the server you would get a lot of benefit by doing SSL bridging by using a client and server SSL profile to decrypt and then re-encrypt to the server. Lots of benefits to this and it is transparent to the server. I would highly recommend performing SSL termination on your LTM. You will not regret it.