Forum Discussion

mahak_381811's avatar
mahak_381811
Icon for Nimbostratus rankNimbostratus
May 02, 2019

whether default cipers supports to TLS 1.0 in TMOS 13.1.1 or not.

I want to enable TLSv1.2. so i want to confirm that whether default cipers supports to TLS 1.0 in TMOS 13.1.1 or not. and how we can enable the TLSv 1.2 on BIG IP.

 

application delivery
ASM Advanced WAF
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    May 02, 2019

    Hi,

     

    You have all info needed in this article (K13163: SSL ciphers supported on BIG-IP platforms (11.x - 13.x)):

     

    https://support.f5.com/csp/article/K13163

     

    As you can noticed, TLS1.2 is supported in the NATIVE SSL stack in BIG-IP 13.0.0 - 13.1.0.

     

    You don't need to enable it by default. but you can force it (use only tls1.2). but in this case client that not support tls1.2 will receive a reset.

     

    regards,