Forum Discussion
Brad_Parker
Mar 07, 2016Cirrus
You will need both a server and client SSL profile similar to what farukaydin put above, but you don't necessarily need to force TLSv1.2 on the client profile nor TLSv1.0 on the server profile. They will negotiate independent of each other as long as you DO NOT select Proxy SSL in the profile. Remember BIG-IP is full proxy from the get go so just applying a client and server SSL profile each SSL connection will be negotiate independently.