IBM DataPower firmware version 6.0 will enable TLS v1.2 or v1.1 by default - United States ssl tsl client hello handshake fail failed version 6.0 TECHNOTE (FAQ)

THIS DOCUMENT APPLIES ONLY TO THE FOLLOWING LANGUAGE VERSION(S):
 English 

QUESTION
 Why would some outgoing SSL handshakes fail with firmware version 6.0 but not prior firmware versions? 

CAUSE
Beginning in firmware version 6.0 and above, the default SSL settings have changed. The Crypto profiles now have TLSv1.2 and 1.1 which will be enabled by default. This affects the protocol version included in the Client Hello when DataPower is acting as the SSL client. If TLSv1.2 is not supported, the server still negotiates to the most secure supported protocol (e.g. TLSv1.1, TLSv1.0, SSLv3) if enabled. 

Some legacy servers with non-compliant implementations of SSL may reject connection attempts when TLSv1.2 or TLSv1.1 are used. In these cases, the handshake fails without properly negotiating to a mutually agreeable protocol.

The TLS versions 1.1 and 1.2 are part of the requirements for being compliant with NIST SP800-131a.



ANSWER
Upgrade the SSL server to a version compliant with the SSL/TLS specifications. If required you may disable TLSv1.2 and TLSv1.1 within the Crypto Profile to allow compatibility. 


Within the domain simply navigate to the Objects> Crypto Configuration> Crypto Profile>
Then simply click on your specific profile to view the Options selection and see what SSL protocol versions are supported.

Any further questions or issues please feel free to contact DataPower support. A packet trace and error report would be the most helpful information in viewing the problem.
Why SSL handshake is failing after upgrading to 6.0 or above? After upgrading my datapower firmware to v6.0 or above, ssl handshake is failing, is there a reason for it? 
Some legacy servers with non-compliant implementations of SSL may reject connection attempts when TLSv1.2 or TLSv1.1 are used. In these cases, the handshake fails without properly negotiating to a mutually agreeable protocol.