F5 upgrade

Please refer to SOL13163 for a list of ciphers supported in each version

Information about Poodle is available in SOL15702, and neither 11.6.0 nor 12.0.0 are vulnerable to it, though your webserver would be negotiating SSL directly with the client if the virtual server type is FastL4 (aka performance)

You can verify what your cipher string would select by asking tmm, using --clientciphers, as below:

Note that you must use single quotes to enclose the cipher string if your string contains a ! character, to prevent the shell from interpreting it.

 tmm --clientciphers 'AES:!SHA'
       ID  SUITE                            BITS PROT    METHOD  CIPHER    MAC     KEYX
 0: 49192  ECDHE-RSA-AES256-SHA384          256  TLS1.2  Native  AES       SHA384  ECDHE_RSA
 1: 49188  ECDHE-ECDSA-AES256-SHA384        256  TLS1.2  Native  AES       SHA384  ECDHE_ECDSA
 2:   107  DHE-RSA-AES256-SHA256            256  TLS1.2  Native  AES       SHA256  EDH/RSA
 3:   106  DHE-DSS-AES256-SHA256            256  TLS1.2  Native  AES       SHA256  DHE/DSS
 4: 49194  ECDH-RSA-AES256-SHA384           256  TLS1.2  Native  AES       SHA384  ECDH_RSA
 5: 49190  ECDH-ECDSA-AES256-SHA384         256  TLS1.2  Native  AES       SHA384  ECDH_ECDSA
 6:    61  AES256-SHA256                    256  TLS1.2  Native  AES       SHA256  RSA
 7: 49191  ECDHE-RSA-AES128-SHA256          128  TLS1.2  Native  AES       SHA256  ECDHE_RSA
 8: 49187  ECDHE-ECDSA-AES128-SHA256        128  TLS1.2  Native  AES       SHA256  ECDHE_ECDSA
 9:   103  DHE-RSA-AES128-SHA256            128  TLS1.2  Native  AES       SHA256  EDH/RSA
10:    64  DHE-DSS-AES128-SHA256            128  TLS1.2  Native  AES       SHA256  DHE/DSS
11: 49193  ECDH-RSA-AES128-SHA256           128  TLS1.2  Native  AES       SHA256  ECDH_RSA
12: 49189  ECDH-ECDSA-AES128-SHA256         128  TLS1.2  Native  AES       SHA256  ECDH_ECDSA
13:    60  AES128-SHA256                    128  TLS1.2  Native  AES       SHA256  RSA