For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ardmallor's avatar
ardmallor
Icon for Nimbostratus rankNimbostratus
Jan 22, 2021

Citrix SSL GW VIp

Have a question here that may seem remedial however having challenges creating a custom VIP on a F5 where SSL is decrypted, sent in the clear to some security reverse proxy devices (if the traffic wa...
application delivery
Changes
iRules
LTM
Sets
KeesvandenBos's avatar
KeesvandenBos
Icon for MVP rankMVP
Jan 23, 2021

Hi,

 

You can create two virtual servers. One with port 443, ssl offloading and pool pool-rp, another with port any (with same destination ip) and pool pool-ctx-direct.

All 443 traffic will go to the 443 virtual server, all other traffic to the any virtual server.

 

Cheers,

 

Kees

  • ardmallor's avatar
    ardmallor
    Icon for Nimbostratus rankNimbostratus
    Jan 23, 2021

    Yes we considered this with a 444 port however this would allow all traffic(http and non-http) to be attacked directly towards that Citrix gw direct and remove our ability to inspection/block traffic (number of citrix http vpn attacks)