tls.version — TLS Version

uint16

In the console: TLS Version

The TLS protocol version used by the client. Represented as a numeric uint16: TLS 1.0 = 769, TLS 1.1 = 770, TLS 1.2 = 771, TLS 1.3 = 772. ssl.version is a synonym for this field — both keys return the same value.

Supported Operators

Operator	Description
==	Exact match
!=	Not equal
lt	Less than
le	Less than or equal
gt	Greater than
ge	Greater than or equal
in	In list
not_in	Not in list

Examples

# Block TLS 1.1 and below
IF   tls.version lt 771
THEN block

# TLS 1.3 only
IF   tls.version == 772
THEN allow

Related

• http.request.version →