redirect to ifile page if TLS 1 or 1.1 is used

Hello Abouleil,

Try the following code

when HTTP_REQUEST { 
    if { [SSL::cipher version] eq "TLSv1" ||  [SSL::cipher version] eq "TLSv1.1"} { 
        HTTP::respond 503 content [ifile get "/Common/maintenance"] 
    } 

}

Verify that your ifile is under the "Common" partition or replace "Common" by your partition name.

Regards

Think you will need to create an LTM iFile object as well, the sys file ifile is used to import the file into iFile but reference for use is through ltm

The following on TMSH should create the iFile for reference within an iRule:

create ltm ifile maintenance file-name maintenance

Or on the Web GUI:

1. On the Main tab, click Local Traffic > iRules > iFile List.
2. Click Create.
3. In the Name field, type a new name for the iFile, such as ifileURL.
4. From the File Name list, select the name of the imported file object, such as 1k.html.
5. Click Finished. The new iFile appears in the list of iFiles.

I'm still getting default browser SSL error below; its still not redirecting to customized ifile html page

Secure Connection Failed An error occurred during a connection to 192.168.110.115. Cannot communicate securely with peer: no common encryption algorithm(s). Error code: SSL_ERROR_NO_CYPHER_OVERLAP

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

Learn more…

Report errors like this to help Mozilla identify and block malicious sites

It looks like your network security settings might be causing this. Do you want the default settings to be restored?

Hello

Find below an optimise Irule:

when HTTP_REQUEST {
switch -glob [SSL::cipher version] {
"TLSv1.*" {
    HTTP::respond 503 content [ifile get maintenance] "Content-Type" "text/html"
}
default {
     do nothing
}
}

I thing you juste forgot to reference your Ifile in LTM. Go to Local Traffic, Irules then "Ifile list" then create your Ifile reference with maintenance name...

Regards,

still not working :(