Forum Discussion
aliasgar215
Nimbostratus
NimbostratusSwitch ssl profile based on weak cipher detection via IRULE
Hi Team, I am looking to create an IRULE to switch ssl profile, if weak cipher detected on tls1.2connection I have created below script but it not accepting on f5 and giving error. Please help m...
zamroni777
MVP
MVPyou might not need irules.
the cipher that will be used is selected by tls server and based on order f5 client side ssl profile.
so you just need to 1 cipher list with strong ciphers for new clients and weak ciphers for old clients and properly arrange them from strongest to weakest.
aliasgar215Nimbostratus
NimbostratusI agree that keeping strong and weak cipher together will get us the same result. But i dont want to disturb the main SSL client profile. So i am looking for a IRULE solution, which can be removed without disturbing any main configuration.
