j_hardin80
Oct 03, 2023Nimbostratus
TLS1
Forgive me but I'm pretty green when it comes to these F5's. We have an F5 LTM that is load balancing our internal and external email. We just had a pen test done and they saw TLS1 and 1.1 open from ...
Thank you but I'm not sure it's working for me. No matter what SSL Profile name I use, it gives me the same listing of virtual servers that I know aren't using that profile.
j_hardin80 That is correct, it will output all virtual servers followed by the SSL profile. It would look something like this.
ltm virtual VS_1.1.1.1_443
ltm virtual VS_2.2.2.2_443
CLIENTSSL-myprofile
ltm virtual VS_3.3.3.3_443
Notice how you have 2 VS back to back and then an indented SSL profile name. You will have to go through the text that shows up in the terminal and grab all VS names that are immediately followed by the SSL profile you are looking for. I don't know of a better way of searching this without doing some complicated regex search.
Unfortunately this is what I'm getting.
I run this command
tmsh list ltm virtual | grep -E "virtual|<name of my ssl profile>"
It returns:
ltm virtual <name of my virtual server> {
but it has all of my virtual servers listed and no duplicates and I don't see any indents with a profile.
j_hardin80 If those are your results then the text for your SSL profile is not an exact match. You need for the text to be an exact match because "grep" is case sensitive.
hmmm not sure what is going on then, I even opened up the profile and copied and pasted the profile name.
it does the same thing for all of my profile names I try to put in there.