For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nov1ce_120072's avatar
nov1ce_120072
Icon for Nimbostratus rankNimbostratus
Feb 26, 2013

SSL offloading

Hello,   I'm trying to test SSL offloading on F5 LTM VE (10.1.0 / 3341.1084).   My setup is pretty straight-forward -- one pool member running IIS 6 on 80/tcp with VS in the same network (I can...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Feb 26, 2013
i do see ie session using TLS_RSA_WITH_AES_128_CBC_SHA cipher but ff/chrome using TLS_RSA_WITH_AES_256_CBC_SHA. additionally, it seems tls v1.1 is enabled in chrome (as we see it tried tls v1.1 (Version 3.2) first in client hello message.

anyway, i am not sure if this is relevant but if you want to try, we may force TLS_RSA_WITH_AES_128_CBC_SHA cipher and disable tls v1.1 in chrome and see whether it makes any change.

e.g. 

[root@ve10:Active] config  b profile myclientssl list
profile clientssl myclientssl {
   defaults from clientssl
   ciphers "AES128-SHA"
}