Forum Discussion
Parveez_70209
Nimbostratus
Mar 03, 2014TLS Protocol Session Renegotiation Security Vulnerability Prevention
Hi Team,
How to prevent TLS Protocol Session Renegotiation Security Vulnerability Issue ? We have LTM running on version 10x.
Thanks and Regards
Parveez
Cory_50405
Noctilucent
Mar 04, 2014If you are going to apply a server SSL profile, then yes your server will need to be configured with a certificate and to accept SSL connections.
So it sounds like if your scanner is still finding the TLS renegotiation vulnerability after changing your client SSL profile to either 'require' or 'require strict', then it's a false positive.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
