Forum Discussion

sloehandman's avatar
sloehandman
Icon for Nimbostratus rankNimbostratus
May 07, 2020

Capture SSL Profile Protocol Stats per Virtual Server

We are on Version 13.1 LTM

 

If you are familiar with the output of the "show ltm profile client-ssl" command, I want to produce the same output on a per VIP basis. Or at least get the Protocol & Ciphers stats per Virtual Server. I know this is in the GUI but I want CLI output.

 

Any suggestions?

2 Replies

  • Try below command​.

    show ltm profile client-ssl <profile_name> raw

    ​write bash script to automate all vips' clientssl cipher states.

  •  ,

    Here's what I use for my auditing work, a simple neat and clean.

    Codeshare of it...

    #!/bin/bash
    echo "Virtual Server, Client-SSL Profile, SSLv2, SSLv3, TLSv1.0, TLSv1.1, TLSv1.2, DTLS" > client-ssl-output.csv
    profile_names=`tmsh list ltm profile client-ssl one-line | awk -F" " '{print $4}'`
    for x in ${profile_names}
    do
    virtual_name=`tmsh list ltm virtual one-line | grep $x | awk -F" " '{print $3}'`
    if [ "${virtual_name}" != "" ]
    then
    cmd=`tmsh show ltm profile client-ssl $x | grep Version | awk -vORS=, '{ print $5 }'`
    for y in ${virtual_name}
    do
    echo "$y,$x,$cmd" >> client-ssl-output.csv
    done
    fi
    done