Intermittent disconnect

Question

Hi,&nbsp;
recently we migrated from v10.2.4 to v12.1.2 and since then we are seeing most of applications are facing issue. The major change I know is related to ciphers hence I have selected serverside ciphers as "serverssl-insecure-compatible" but still we are seeing intermittent disconnect. Is there any another way we can find the reason for disconnect. &nbsp;
Also one thing I noticed that at server "TLSv1.2  112 bits  ECDHE-RSA-DES-CBC3-SHA        Curve B-571 DHE 570" is configured while if I check on F5 same cipher ECDHE-RSA-DES-CBC3-SHA is showing but with 168 bits. Please suggest.&nbsp;

only1masterbla1 · Answer

Use curl -vk command on F5 for backend server ssl connectivity check.&nbsp;

Check ciphers supported on F5 Vs Server ciphers as per list below. Use Hex value for comparison instead of cipher suite name.&nbsp;

K13163: SSL ciphers supported on BIG-IP platforms (11.x - 13.x)
https://support.f5.com/csp/article/K13163&nbsp;
K13156: SSL ciphers used in the default SSL profiles (11.x - 13.x)
https://support.f5.com/csp/article/K13156&nbsp;

jg · Answer

Another possible reason for that is that the back-end application servers are not configured consistently.&nbsp;

Forum Discussion

Intermittent disconnect

2 Replies

Recent Discussions

Rundeck ansible F5 errors

What is the meaning is 52% block in WAF

rewrite Azure AD response for portal access via web portal

AS3 Monitoring multiple ports selectively

Open Redirection Mitigation

Related Content

Disconnect and reconnect all the time

SSL VPN Disconnect Issue

HA upgrade - status Disconnected

POST requests lost between two vs intermittently

The Exec-Disconnect on IT Security