For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Mar 08, 2024

Cannot get decryption happening with F5 SWG

Hi; I have implemented F5 SWG as per this article:   https://techdocs.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-secure-web-gateway-implementations-11-5-0/4.html   My understanding ...
cloud
security
Lucas_Thompson's avatar
Lucas_Thompson
Icon for Employee rankEmployee
Apr 04, 2024

Unfortunately a lot of the search results are for this content are for v11.x, which was released over a decade ago. SWG has changed significantly since that older version. Take a look at these newer instructions that talk about SWG implementations:

https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-access-policy-manager-secure-web-gateway/ssl-bypass-and-intercept-with-apm.html

We also have another module called SSL Orchestrator that is specifically designed for this "decrypting outbound internet gateway" use case. It allows you to dynamically forward selected traffic to 3rd party inspection devices that do not themselves support SSL interception. It also makes setup much simpler:

 https://clouddocs.f5.com/sslo-deployment-guide/sslo-11/chapter1/page1.01.html