For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
May 01, 2016

If we're still talking about client certificate authentication, then no. Mutual PKI authentication is a function of the SSL handshake. So for the server to be able to consume the client's certificate, they must perform a direct SSL handshake, which means you cannot decrypt and re-encrypt in the middle. The F5 is then blind to the application traffic.