Forum Discussion

bluestar007_339's avatar
bluestar007_339
Icon for Nimbostratus rankNimbostratus
Nov 16, 2017

disabling protocol

Hi, What is the difference between the below procedures 1) tmsh modify sys http ssl-protocol 'all -SSLv2 -SSLv3 -TLSv1'

 

tmsh list sys http ssl-protocol sys httpd { ssl-protocol "all -SSLv2 -SSLv3 -TLSv1" }

 

2) tmsh list /ltm profile client-ssl Test options ltm profile client-ssl Test { options { dont-insert-empty-fragments no-tlsv1 } }

 

If we want to disable tlsv1 and keep only tlsv1.1 and 1.2 , it can be do with CIPHERS ? ( ciphers DEFAULT) ,If yes what would be the string ?

 

Thanks

 

1 Reply

  • Hello,

     

    This command "tmsh modify sys http" modifies F5 gui console, if you want to modify F5 Virtual server SSL configuration you should use "ltm profile"