For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Parveez_70209's avatar
Parveez_70209
Icon for Nimbostratus rankNimbostratus
Mar 03, 2014

TLS Protocol Session Renegotiation Security Vulnerability Prevention

Hi Team,   How to prevent TLS Protocol Session Renegotiation Security Vulnerability Issue ? We have LTM running on version 10x.   Thanks and Regards Parveez  
Cory_50405's avatar
Cory_50405
Icon for Noctilucent rankNoctilucent
Mar 03, 2014

One thing I'll add is that enabling secure renegotiation on a server SSL profile will break connections if the server isn't patched accordingly. We encountered this for many different applications after upgrading to v11. In an ideal world, all servers would be patched for this renegotiation vulnerability, especially since it's been around for so long, but...

 

Something to keep in mind when upgrading.