Forum Discussion

nathe's avatar
nathe
Icon for Cirrocumulus rankCirrocumulus
Nov 17, 2009

SSL redirect iRule

Afternoon,     We have a Big-IP ASM appliance (v9.4.4) in front of our Corporate internet site. We need to restrict customers from connecting with less than 128 bit encryption and hope to r...
application delivery
dev
devops
iRules
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Nov 18, 2009
Hi Nathan,

 

 

In order to send the redirect, you have to allow the weak cipher in the client SSL profile. It's not actually a vulnerability though as you're not allowing a client with a weak cipher to connect to anything beyond the LTM. It will still show up as an issue in a pen test, but it's not a true problem.

 

 

Aaron