Forum Discussion

ADALL_190792's avatar
ADALL_190792
Icon for Nimbostratus rankNimbostratus
Mar 05, 2015

SSLv3 to TLS 1.x Proxy

Hoping to find out if this is possible. We have a server that is only SSLv3 compatible and due to compliance reasons we must use TLS 1.x. Is it possible to use the F5 as a proxy in the situation to...
application delivery
LTM
proxy
sslv3
tls
JoshBecigneul's avatar
JoshBecigneul
Icon for MVP rankMVP
Mar 06, 2015

To clarify, you have a SSL "client" that only speaks SSLv3 and must be able to speak to a TLS-only service? Or do you have a typical client and a server that can only speak SSLv3? Your ascii diagram makes this slightly unclear.

 

If you mean the typical scenario, this certainly is possible. You would configure the virtual server for SSL Bridging mode, with both a client-ssl profile and server-ssl profile. Configure the client-ssl profile to disable SSLv3 and whatever other modifications you need. The server-ssl profile usually can be left at default values and it should work with most servers.