Forum Discussion

AJF5's avatar
AJF5
Icon for Altocumulus rankAltocumulus
Aug 26, 2017
Solved

Disable TLS 1.0 and 1.1 protocol on VIPS, Only TLS 1.2 should be on.

Suppose we have to disable TLS 1.0 and 1.1 protocol on a VIP. Only TLS 1.2 should be enabled.

 

Consider client-ssl profile is having the existing ciphers as :

 

  • ciphers DEFAULT:!ADH:!EXPORT40:!EXP:!LOW:!SSLv3:!MD5:!RC4-SHA:!3DES

Will modifying cipher to "TLSv1_2" fulfill the requirement.

 

devops
LTM

5 Replies

Sort By
  • JG's avatar
    JG
    Icon for Cumulonimbus rankCumulonimbus
    Aug 28, 2017

    To disable the protocol:

     

    (On v11.6.1)

     

    • Go to Local Traffic -> Profiles -> SSL -> Client and click on the relevant profile.

       

    • From "Options List": Select "No TLSv1.1" and enable it.

       

    I think support of v1.0 is already discontinued in this version.

     

  • Maneesh_72711's avatar
    Maneesh_72711
    Icon for Cirrostratus rankCirrostratus
    Aug 26, 2017

    What version your LTM is on ? Modifying the SSL Profile (Client/Server) would sort this.

     

  • AJF5's avatar
    AJF5
    Icon for Altocumulus rankAltocumulus
    Aug 26, 2017

    It is 11.3. And yes you are right about modiying the SSL profile. But my question was if I am changing the current cipher in client-ssl profile "DEFAULT:!ADH:!EXPORT40:!EXP:!LOW:!SSLv3:!MD5:!RC4-SHA:!3DES" with "TLSv1_2". Will that work as we want only TLSv1.2 to be enabled.