Forum Discussion
1 Reply
Sort By
which tmos version are you using?
just to make sure, you seeing a difference between SSL enabled VIPs? not between a non SSL and a SSL enabled VIP?
as for you last question, yes the setting can only be changed from the CLI, but in general you dont want to change the setting, as it is a way to prevent to tls triple handshake.
assuming this comes from qualys this thread is interesting to read:
https://qualys-secure.force.com/discussions/s/question/0D52L00004TnvDPSAZ/regarding-rfc-7627-on-transport-layer-security-tls-session-hash-and-extended-master-secret-extension-will-become-a-mandatory-tls-extension