For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Sam_D_'s avatar
Sam_D_
Icon for Altostratus rankAltostratus
May 07, 2020

TLS versions in ClientHello

I'm wondering how I can read TLS versions such as TLS version in Record Layer and the Max supported TLS version from ClientHello message by using: when CLIENTSSL_CLIENTHELLO { }
LTM
security
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
May 07, 2020

Please check below one if it helps.

 

​when CLIENTSSL_CLIENTHELLO {

log local0. [IP::client_addr]

log local0. [SSL::cipher version]

}

​

Mayur​

​

Samir's avatar
Samir
Icon for MVP rankMVP
May 07, 2020

Generally we see TLS/SSL renegotiation in ssldump. I don't think record-layer TLS version will display via iRule. I believe SSL debug has to enable to check or capture packet via ssldump..