For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ToonVA's avatar
ToonVA
Icon for Cirrus rankCirrus
Dec 07, 2018

tmsh command to list client-ssl profiles - Full noted values

I am working on a project to remove TLS1.0 from our F5 BIG-IP systems. The company want first a good overview where TLS1.0 is still used (which VIP's) so i exported those with tmsh command but if the...
BIG-IP
security
TMSH
wlopez_98779's avatar
wlopez_98779
Icon for Nimbostratus rankNimbostratus
Dec 07, 2018

If you switch to the tmsh command line (just type 'tmsh' from bash) you can do the following commands:

For all client ssl profiles on the default partition (/Common):

show ltm profile client-ssl raw | grep 'Ltm::ClientSSL\|Protocol'

For all client ssl profiles on all the other partitions:

show ltm profile client-ssl /*/* raw | grep 'Ltm::ClientSSL\|Protocol'
  • ToonVA's avatar
    ToonVA
    Icon for Cirrus rankCirrus
    Dec 12, 2018

    Thanks for the info! Is there a way to export this to a file also?

     

    show ltm profile client-ssl raw | grep 'Ltm::ClientSSL|Protocol' > exportssl

     

    I only get the option to display them on my screen

     

  • AceDawg1's avatar
    AceDawg1
    Icon for Nimbostratus rankNimbostratus
    Dec 12, 2018

    If you have access to the BASH shell, simply run the command from there:

    tmsh show ltm profile client-ssl raw | grep ‘LTM::ClientSSLProtocol’ > fileName

  • ToonVA's avatar
    ToonVA
    Icon for Cirrus rankCirrus
    Dec 12, 2018

    Thank you , must have made a typo or something because it works now