Forum Discussion
Juraj_314736
Sep 20, 2017Nimbostratus
TLS/1.0, PCI, and a custom message for HTTP response status codes
By June 30, 2018 we would like to turn off TLS/1.0 on all our HTTPS websites, in order to be compliant with PCI requirements.
Instead of just turning TLS/1.0 off, we would like to use that time bet...
JG
Jan 25, 2018Cumulonimbus
Here's a quick and easy one for this situation based on the responses above:
when HTTP_REQUEST {
switch -exact [SSL::cipher version] {
"TLSv1.2" {
do nothing
}
"TLSv1.1" {
do nothing
} default {
HTTP::respond 403 content {
Access Denied
You are using a Web browser that is not secure for accessing confidential information. Please upgrade to the most recent version./font>
} "Content-Type" "text/html" Connection close
TCP::close
return
}
}
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects