For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ip_henry_140157's avatar
ip_henry_140157
Icon for Nimbostratus rankNimbostratus
Jun 05, 2014

SSL Fix?

Is there a recommended fix for this?   http://www.zdnet.com/openssl-fixes-another-severe-vulnerability-7000030253/  
Sven_Leupold_85's avatar
Sven_Leupold_85
Icon for Cirrus rankCirrus
Jun 05, 2014

This answers some questions: http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html

 

TMM is not using openssl for SSL enabled virtual servers except you configure COMPAT ciphers on 11.5.x. The risk on the management traffic (configuration/iControl/big3d) is low as long as your management segment is separated.

 

But, still, F5 should provide an official statement that their SSL implementation is not affected.