Forum Discussion

MaxMedov's avatar
MaxMedov
Icon for Cirrostratus rankCirrostratus
Jun 05, 2023

Support TLS1.3 and TLS1.2 protocols

Hello,  Today we are working only with TLS1.2 on SSL Clients profiles. We are about to enable TLS1.3, and I have a few questions before a behavior about the SSL handshake process: Case - We are w...
security
Paulius's avatar
Paulius
Icon for MVP rankMVP
Jun 05, 2023

MaxMedov in addition to what Mohamed_Ahmed_Kansoh has stated. Typically you have an "order" setting on the F5 when defining which SSL ciphers you will use but I do not remember the default setting for this. The following might assist you in verifying what the configuration is through the CLI and how it will appear to the client when it is used.

https://my.f5.com/manage/s/article/K01770517

The two sections are named "Configuring the SSL profile to order SSL ciphers by strength" and "View the SSL cipher order" through the GUI for configuration and CLI for verification of the cipher output. I believe the options for order are the following but I could be wrong on this.

Default
Speed
Strength
FIPS
Hardware