Forum Discussion

gijo_342173's avatar
gijo_342173
Icon for Nimbostratus rankNimbostratus
Oct 23, 2018

SSL passthrough VIP - mitigating birthday attack

Is it possible to apply a SSL client profile to mitigate on the VIP eventhough the VIP is in SSL passthrough mode this per https://support.f5.com/csp/article/K13092 ?   Are there other possibiliti...
application delivery
LTM
security
  • gs_366906's avatar
    gs_366906
    Oct 24, 2018

    In passthrough you cannot add any ssl profile i.e.- client or server

     

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 23, 2018

Okay, so the fix here is to disable TLS1 in the client SSL profile. But not sure how this relates to a VIP in SSL passthrough mode. If you want to mitigate TLS1 vulnerabilities at the F5, then you need to minimally apply a client SSL profile that does this, and then you're no longer in passthrough mode.