For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

rvogster's avatar
rvogster
Icon for Nimbostratus rankNimbostratus
Dec 17, 2013

SSLv2 Client Hello

We recently upgrades some LTMs from version 11.2 to 11.4 HF4 and we have some older web applications behind them that will only accept an SSLv2 Client Hello from the F5 which is then renegotiated to ...
Kevin_K_51432's avatar
Kevin_K_51432
Historic F5 Account
Dec 17, 2013

Hi, it looks like the "COMPAT" SSL stack still has some support for SSLv2. You could set this on the SSL Profile in the 'Ciphers' options: Configuration > Advanced > Ciphers. The default is "DEFAULT".

 

http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html

 

Also, you can look in the Options list for the various protocols to disable: No TLS1_2, No SSLv3, etc.