For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Teemu_Kunnari_1's avatar
Teemu_Kunnari_1
Icon for Nimbostratus rankNimbostratus
Jan 26, 2018

Use different ciphers for a host when using policies

Hello,   I was wondering if it possible to use different ciphers for different hosts (e.g test123.com) when using policies to forward traffic to different pools on the same virtual server?   I...
application delivery
LTM
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Jan 30, 2018

You can do by enabling renegotiation with the SSL Profiles and swapping but this is not a recommended solution.

 

First the security issues, second all connections would go through multiple SSL connections so slowing things down.

 

Recommend configuring multiple Virtual Severs with different SSL Profiles. Simple, more secure and easy to manage than a complex set of iRules.