For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Parveez_70209's avatar
Parveez_70209
Icon for Nimbostratus rankNimbostratus
Mar 03, 2014

TLS Protocol Session Renegotiation Security Vulnerability Prevention

Hi Team,   How to prevent TLS Protocol Session Renegotiation Security Vulnerability Issue ? We have LTM running on version 10x.   Thanks and Regards Parveez  
Parveez_70209's avatar
Parveez_70209
Icon for Nimbostratus rankNimbostratus
Mar 04, 2014

Hi,

 

As I shared that our Image is : BIG-IP 10.2.4 Build 817.0 Hotfix HF7 and as per the document shared by Kevin, ours should not be vulnerable as : TLS Protocol Session Renegotiation Security Vulnerability.

 

Seondly Cory, I tried by modifying : 'Secure Renegotiation' to either 'require' or 'require strict'( into SSL Client Profile). But it didn't helped, after scanning the same again, we got the same Vulnerability again.

 

Kindly suggest.

 

Thanks and Regards Parveez