Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

fpieressa's avatar
fpieressa
Icon for Altostratus rankAltostratus
May 31, 2019

TLSv1.3 Cipher group

Hi team, we are seeing that with TLSv1.3 is mandatory to configure a Cipher group, which is the recommended Cipher group to configure to have all the Ciphers included in the DEFAULT Cipher Suite, plu...
application delivery
big-ip
LTM
TLSv1.3
Nathan_F__F5_'s avatar
Nathan_F__F5_
Icon for Employee rankEmployee
Jun 12, 2019

It looks like you may be able to simply remove the "No TLSv1.3" option from the Enabled Options list within the SSL profile. I have not personally tried it but there is an article regarding TLS 1.3 that mentions it.

 

K10251520: BIG-IP support for TLS 1.3

https://support.f5.com/csp/article/K10251520