For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

F5beginner_3849's avatar
F5beginner_3849
Icon for Nimbostratus rankNimbostratus
Apr 04, 2019

SSL Handshake failed

Hello, I have a problem with lot of logs with warning level:   warning F5 01260013 SSL Handshake failed for TCP   This logs bellow are not so often as above log:   warning f5 01260009 Connec...
BIG-IP
LTM
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Apr 04, 2019

Hi F5Beginner,

 

if your Virtual Server is faced in the internet, those logs are pretty much normal. Lots of crawlers/bots are running around and trying some silly stuff...

 

warning f5 01260009 Connection error: ssl_hs_rxhello:10025: unsupported version (40)

 

Someone has tried to establish a TLS/SSL session with your box, but did not support your allowed TLS versions.

 

warning f5 01260009 Connection error: ssl_select_suite:9300: TLS_FALLBACK_SCSV with a lower protocol (86)

 

Most likely a automated test to see if you handle TLS_FALLBACK_SCSV correctly (aka. Poodle attacks).

 

Cheers, Kai