Forum Discussion

rsacheen's avatar
rsacheen
Icon for Nimbostratus rankNimbostratus
Mar 13, 2017

BIG-IP SSL related error/access logs

In case of SSL termination (HTTPS offloading), is there a way to find out if the client is being blocked by BIG-IP because of http://.. access. Does BIG-IP output any SSL related authentication error...
application delivery
BIG-IP
LTM
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Mar 13, 2017

Its default behaviour of LTM to drop connection if http(vip) doesn't exist. If you wanted to track http connection then create http vip n apply irule with drop condition and send client log to ltm. Does it makes sense?

 

Other option to redirect all connection to https vip n take client IP log.

 

  • rsacheen's avatar
    rsacheen
    Icon for Nimbostratus rankNimbostratus
    Mar 13, 2017

    Thank you for the reply jhaas! Want to know whether LTM produces any logs when the connection is dropped. About tracking HTTP connection and redirection to HTTPS VIP, I shall try it later. Thanks!

     

  • Samir_Jha_52506's avatar
    Samir_Jha_52506
    Icon for Noctilucent rankNoctilucent
    Mar 13, 2017

    No.F5 doesn't track drop connection log in ltm log.

     

  • rsacheen's avatar
    rsacheen
    Icon for Nimbostratus rankNimbostratus
    Mar 14, 2017

    Got the answer. Thank you!