For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

GavinW_29074's avatar
GavinW_29074
Icon for Nimbostratus rankNimbostratus
May 24, 2012

SSL Renegotiation on PEN Test???

Hi there     We're currently getting some of our sites which are served through our F5's pen tested...     Our F5's are currently running v11.1.0 HF2.     The PEN test report has f...
security
jwham20's avatar
jwham20
Icon for Nimbostratus rankNimbostratus
May 24, 2012
Also, since you're on 11.1.0, you should have:

 

 

http://tools.ietf.org/html/rfc5746 Transport Layer Security (TLS) Renegotiation Indication Extension

 

 

Which was the fix for the reneg issue. It might be that the Pen test did not check for the secure_renegotiation flag

 

 

You happen to know the tool they were using?

 

 

-Joshm