Forum Discussion
what are the ssl ciphers supported on F5 and how to block the request which are on old cipher versions.
Support ciphers are documented at https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13163.html
To give a message to a browser that uses weak encryption, you cannot block the weak encryption in the ssl profile. You must allow the weaker ssl to happen and then use some mechanism(such as an iRule) to send them the message. Because of this, other people I have talked to who want to do this stop because they do not want the weak ssl to complete as it impacts their security audits. It can become difficult to catch all of the possible weak encryptions methods properly. Here is an example that would catch SSLv3 and redirect them to another website with a message.
when HTTP_REQUEST {
if { [SSL::cipher version] eq "SSLv3" } {
HTTP::respond 302 Location "http://weakencryption"
}
}
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com