Forum Discussion

Chris_123510's avatar
Chris_123510
Icon for Nimbostratus rankNimbostratus
Oct 20, 2015

TLS

I am trying to set up my LTM so that it will only accept TLS connections. They are asking that we do away with SSLv3 completely. I am not sure how to do that without causing interruptions, we have ...
application delivery
LTM
Andy_McGrath's avatar
Andy_McGrath
Icon for Cumulonimbus rankCumulonimbus
Oct 20, 2015

SSL protocol and ciphersuite configuration is under the client ssl profiles (for clientside) and server ssl profiles (for serverside), within the profiles you have the option of setting ciphersuite and protocol the following links should help you.

 

sol13163: SSL ciphers supported on BIG-IP platforms (11.x - 12.x)

 

sol15194: Overview of the BIG-IP SSL/TLS cipher suite

 

sol8802: Using SSL ciphers with BIG-IP Client SSL and Server SSL profiles

 

sol13171: Configuring the cipher strength for SSL profiles (11.x) - Configuring the SSL profile to block a specific SSL version

 

If you're running 11.5.0 or above SSLv3 is disabled in the 'DEFAULT' ciphersuite list, anything earlier changing the ciphersuite setting in the ssl profile to 'DEFAULT:!SSLv3' should work.