Bug ID 2346977: Virtual Servers with an SSL Orchestrator Access profile don't send Server Hello to the client

Last Modified: Jul 28, 2026

Affected Product(s):
BIG-IP SSLO(all modules)

Known Affected Versions:
21.1.0, 21.1.0.1

Opened: Jun 22, 2026

Severity: 3-Major

Symptoms

SSL connections from a client to the BIG-IP stall due to the BIG-IP not sending a Server Hello to the client

Impact

The SSL handshake fails, and the connection stalls due to the lack of a Server Hello from the BIG-IP

Conditions

A virtual server that - Has an SSL Orchestrator Access Profile attached - Has either -- Address Translation disabled OR -- Transparent Nexthop set - Does not have anything to re-enable SSL client-side

Workaround

Attach an irule that re-enables SSL client side on CLIENT_ACCEPTED to the affected virtual server when CLIENT_ACCEPTED { SSL::enable clientside }

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips