For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Skuba_85554's avatar
Skuba_85554
Icon for Nimbostratus rankNimbostratus
Aug 11, 2009

bypassing client authentication

i've got a virtual server listening on 443 which uses both a certificate for SSL and also requires client authentication. this works fine     i've now been informed of another set of users ...
config
design
Skuba_85554's avatar
Skuba_85554
Icon for Nimbostratus rankNimbostratus
Aug 11, 2009
hi

 

 

thanks for your reply. i've just been looking at the example, and i think we need something similar but even more simplistic. such as...

 

 

when HTTP_REQUEST {

 

if {[HTTP::uri] starts_with "/abc/" } {

 

***something to route traffic straight to pool members bypassing client authentication***

 

}

 

else {}

 

***client is forced to authenticate***

 

}

 

 

any tips/advice would be appreciated

 

 

thanks