For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus
Feb 22, 2023
Solved

How to disable only TLS v1 & TLS v1.1 on specific virtual server

Hi all, Could you help me how to disable only TLS v1 & TLS v1.1 on specific virtual server and no to entire ssl profile. Thank you in advance,
cloud
devops
security
  • mihaic's avatar
    mihaic
    Feb 22, 2023

    try this irule:

    when CLIENT_ACCEPTED {
        SSL::profile vip_ssl_no_TLSv1
    }

     where vip_ssl_no_TLSv1 is another SSL profile  where you disable whatever you want.

    I tested with this cipher string : DEFAULT:!TLSv1:!TLSv1_1

P_Kueppers's avatar
P_Kueppers
Icon for MVP rankMVP
Feb 22, 2023

Create a new SSL-Profile and use your current one as parent. Then deactivate tls1/1.1 and put this on the virtual server. 

Cpet's avatar
Cpet
Icon for Altocumulus rankAltocumulus
Feb 22, 2023

Hi,
Correct , but i don't want to create a lot of SSL profiles.Also I wanted to know if it was possible to do it with an irule.

Thanks.