Assistance in enabling TLS1.1 and TLS1.2

Question

Need assistance in enabling TLS1.1 and TLS 1.2 in BIGIP LTM&nbsp;
Kindly help in providing the steps for enabling TLS1.1 and TLS 1.2 in BIGIP LTM&nbsp;
No other protocols should be disabled on the load balancer. The final result will be
TLS 1.2 Enabled
TLS 1.1 Enabled
TLS 1.0 Enabled
SSL 3.0 Enabled
SSL 2.0 Enabled&nbsp;
My current software version : BIG-IP 11.2.1 Build 862.0 Hotfix HF2 &nbsp;

boneyard · Answer

this document indicates those are already supported and active if you haven't changed the default cipher string&nbsp;
http://support.f5.com/kb/en-us/solutions/public/13000/100/sol13156.html&nbsp;
although SSLv2 isn't enabled by default and shouldn't be in my opinion.&nbsp;
could you please show your current cipher string used in the client SSL profile?&nbsp;

rajendran2002_1 · Answer

Hi Boneyard&nbsp;
Thank you for the answer. I don't use any custom ciphers. just using the default ciphers in ssl profile&nbsp;

boneyard · Answer

then you already support most of what you say you want. if this server is reachable form the internet you can use ssl labs to double check what is supported

https://www.ssllabs.com/ssltest/

rajendran2002_1 · Answer

Thank you, this works&nbsp;

boneyard · Answer

if this answered your question please flag it as such.

Forum Discussion

Assistance in enabling TLS1.1 and TLS1.2

5 Replies

Recent Discussions

F5Access | MacOS Sonoma

Rewrite uri translation not working

Chrome V 124+ on MacOS - Virtual Server Access Issue

Transaction looks successful but file not downloading

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Related Content

Re: Welcome to the F5 BIG-IP Migration Assistant

Enable telnet on SSH

Assistance with iRule using port ranges

iRule to assist with CVE-2022-22965 mitigation

SSL Orchestrator Advanced Use Cases: Enabling GCloud Organization Restrictions