NimbostratusGreetings,
The Traffic Management Microkernel (TMM) usually does a pretty good job describing SSL failures. Can you tail the log while connecting through the Standard VIP setup (requires bash)?
tail -f /var/log/ltm
We had quite a few cases like this a few years ago when secure renegotiation was enabled on the profile.
K13512: BIG-IP SSL profiles now require secure renegotiation of SSL connections
https://support.f5.com/csp/article/K13512
If you're not getting good log messages during testing, give the workaround here a try:
K17045: Log messages concerning SSL handshake failures may not include enough detail
https://support.f5.com/csp/article/K17045
Hope this is helpful!
Kevin
