F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

mahak_381811's avatar
mahak_381811
Icon for Nimbostratus rankNimbostratus
May 01, 2019

whether default cipers supports to TLS 1.0 in TMOS 13.1.1 or not.

I want to enable TLSv1.2. so i want to confirm that whether default cipers supports to TLS 1.0 in TMOS 13.1.1 or not. and how we can enable the TLSv 1.2 on BIG IP.  
application delivery
ASM Advanced WAF
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
May 01, 2019

Hi,

 

You have all info needed in this article (K13163: SSL ciphers supported on BIG-IP platforms (11.x - 13.x)):

 

https://support.f5.com/csp/article/K13163

 

As you can noticed, TLS1.2 is supported in the NATIVE SSL stack in BIG-IP 13.0.0 - 13.1.0.

 

You don't need to enable it by default. but you can force it (use only tls1.2). but in this case client that not support tls1.2 will receive a reset.

 

regards,