Forum Discussion
Vijay_01
Altostratus
Jun 21, 2023TLSv1.0 and TLSv1.1 disable in Device Certificate
Hi Team, Recently, the vulnerability management team in our organization gave a report where they mentioned that the device SSL certificate (self-signed/CA-signed) used to access the F5 GUI has TLSv...
whisperer
MVP
Jun 21, 2023Alternatively, if you can restrict to only TLS 1.2 cipher, then type the following command instead:
tmsh modify /sys httpd ssl-ciphersuite 'ALL:!ADH:!EXPORT:!eNULL:!MD5:!DES:!SSLv2:!SSLv3:!TLSv1:!TLSv1.1'
tmsh save sys config
That should do it. Sounds like the security team only wants you to use TLSv1.2 🙂
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects