For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Davect26's avatar
Davect26
Icon for Nimbostratus rankNimbostratus
May 16, 2018

Why would a https monitor send two different Clienthello versions to different VIP pool members on the same box?

I have two different fastl4 VIPs that are configured identical except for the IPs & pool members. They both use a https monitor with cipherlist DEFAULT:+SHA:+3DES:+kEDH. One monitor marks the membe...
application delivery
LTM
David__Pasch's avatar
David__Pasch
Icon for Altostratus rankAltostratus
May 16, 2018

This is due to the server already negotiating a lower version. At that point the F5 will start with the previously negotiated version.

 

To reset this, remove the monitor from the pool and then re-apply.

 

David Pasch