Bug ID 2181929: Cipher suite order changes in cipher group after upgrading from v17.1.1.1 to v17.1.3

Last Modified: Dec 16, 2025

Affected Product(s):
BIG-IP Install/Upgrade, LTM(all modules)

Known Affected Versions:
17.1.1.1, 17.1.1.2, 17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3

Opened: Dec 05, 2025

Severity: 3-Major

Symptoms

After upgrading from v17.1.1.1 to v17.1.3, client connections begin negotiating with unexpected lower-priority cipher suites. Applications sensitive to cipher strength (e.g., credit card payment systems) experience transaction failures or service disruption.

Impact

Failed service due to wrong Ciphers being used by the LTM VS/ Client Profile

Conditions

BIG-IP system running v17.1.1.1 is upgraded to v17.1.3 or When MCPD reload After the upgrade or MCPD reload, the internal ordering of cipher rules within the cipher group is modified.

Workaround

Change the group order from Default to Strength in Local Traffic ›› Ciphers : Groups

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips