Forum Discussion

Korai_331784's avatar
Korai_331784
Icon for Altostratus rankAltostratus
Jan 08, 2019

F5 SSL Profile

Hi,   I am working on F5 Vulnerabilities and needs to disable SSL/TLS older versions and to enable only TLS1.2. I have SSL profile but can see "All Option disabled" setting so what does this means...
BIG-IP
LTM
security
RaghavendraSY's avatar
RaghavendraSY
Icon for Altostratus rankAltostratus
Jan 08, 2019

Is SSL client profile assigned to virtual server? if it not assigned they there is no use with ssl client profile. To enable only TLS 1.2 you can modify ciphers accordingly and apply to virtual server. What F5 version you are running?

 

  • Korai_331784's avatar
    Korai_331784
    Icon for Altostratus rankAltostratus
    Jan 08, 2019

    hi,

     

    yes we have client ssl profile as F5 is working as full proxy so two ssl profiles one for client and one for server.

     

    we are running 10.2 version and soon will upgrade version