Forum Discussion

Pihu_294516's avatar
Pihu_294516
Icon for Altostratus rankAltostratus
May 04, 2018

Need help with understanding the alert

Hi All,

 

Can anyone care to explain me what the below alert means? To give the highlight, We (Network team) manage virtual instance of HA pair of load balancers which are running 13.0 with HF2. These load balancers are hosted in cloud and are been monitored by them.We get the email notification about it. Can anyone explain me what does the below alert mean? We get such alerts on a daily basis. We opened a TAC case but he was not able to help us much. Any help will be greatly appreciated. TIA..

 

Hostname: abclb01.xxx.com, IP: x.x.x.x, Alert Time: Fri May 04 13:31:17 UTC 2018, Metric Name: f5lb.server.ssl.handshakefailures, Severity: Critical, SSL Profile Name: /Common/serverssl, SSL Handshake failures: 74993, Reason: F5 LB server ssl handshake failures are 74993 (> 50)

 

application delivery
BIG-IP
LTM

1 Reply

Sort By
  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    May 04, 2018

    As per logs it seems F5 to back-end server SSL handshake is failing. Did you capture SSL dump packet on F5 Device? It will give more clarity of incompatible cipher site.

    FYI, Select 

    serverssl-insecure-compatible
    serverssl profile to vip, issue might solve(Suggestion) but go to actual root cause.