Forum Discussion
aliasgar215
Nimbostratus
Dec 20, 2024Switch ssl profile based on weak cipher detection via IRULE
Hi Team, I am looking to create an IRULE to switch ssl profile, if weak cipher detected on tls1.2connection I have created below script but it not accepting on f5 and giving error. Please help m...
zamroni777
Nacreous
Dec 26, 2024you might not need irules.
the cipher that will be used is selected by tls server and based on order f5 client side ssl profile.
so you just need to 1 cipher list with strong ciphers for new clients and weak ciphers for old clients and properly arrange them from strongest to weakest.
- aliasgar215Dec 26, 2024
Nimbostratus
I agree that keeping strong and weak cipher together will get us the same result. But i dont want to disturb the main SSL client profile. So i am looking for a IRULE solution, which can be removed without disturbing any main configuration.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects