Forum Discussion

Keith_Hepner's avatar
Keith_Hepner
Icon for Nimbostratus rankNimbostratus
Jun 11, 2015

sslv3 error processing

Is there a way to capture the error returned from f5 when you have NOSSLV2 and NOSSLV3 options specified in an SSL profile? Is there an irule event that I can hone in on? Thanks in advance

 

application delivery
devops
iRules
LTM
security

7 Replies

Sort By
  • Nova's avatar
    Nova
    Icon for Cirrus rankCirrus
    Jun 11, 2015

    You might try changing the ssl log level to debug. Then something should show up in /var/log/ltm.

     

    Mike

     

  • shaggy_121467's avatar
    shaggy_121467
    Icon for Cumulonimbus rankCumulonimbus
    Jun 12, 2015

    do you mean what error/message is returned to users, or what error is logged on the F5?

     

    • Keith_Hepner's avatar
      Keith_Hepner
      Icon for Nimbostratus rankNimbostratus
      Jun 12, 2015
      I was looking for an error seen/logged on the f5 that I could possibly trap and send a redirect page back to the user but if there is no session established because of the ssl level there probably isn't a way to send anything back.....
    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      Jun 13, 2015
      indeed, the session fails of tcp level, you won't be able to send anything back.
  • shaggy's avatar
    shaggy
    Icon for Nimbostratus rankNimbostratus
    Jun 12, 2015

    do you mean what error/message is returned to users, or what error is logged on the F5?

     

    • Keith_Hepner's avatar
      Keith_Hepner
      Icon for Nimbostratus rankNimbostratus
      Jun 12, 2015
      I was looking for an error seen/logged on the f5 that I could possibly trap and send a redirect page back to the user but if there is no session established because of the ssl level there probably isn't a way to send anything back.....
    • boneyard's avatar
      boneyard
      Icon for MVP rankMVP
      Jun 13, 2015
      indeed, the session fails of tcp level, you won't be able to send anything back.