I tried and failed, it is not so granular in ADM. Maybe I miss something.
f
Felix Marte
07/23/2020, 3:24 PM
Using a build in the 12.1 family, Under Networks > SSL Dashboard, there is a panel for SSL protocols which lists the number of vips using the various SSL and TLS versions. I can click that number next to TLS 1.0 and get all the VIPs using TLS 1.0. There is also an export that lets me save the results as a report. Is that what you are referring to, or some other kind of report?
👍 1
j
jvitech
07/24/2020, 8:55 AM
In my case, I was looking to find out how many clients were still using TLS1.0 and if we could disable it without impacting users. I could get some data from ADM but it was flaky.
e
Eirik Vesterhus / Intility AS
07/27/2020, 12:16 PM
I use syslog and splunk for this. Just send the syslog to splunk or something similar and look for SSL_HANDSHAKE_SUCCESS events. If I remember correctly the versions show as HEX codes.
0x300 = SSL 3.0
0x301 = TLS 1.0
0x302 = TLS 1.1
0x303 = TLS 1.2
I have not tested it, but 0x304 is probably TLS 1.3.