Forum Discussion

Elasa_26701's avatar
Elasa_26701
Icon for Nimbostratus rankNimbostratus
Jan 22, 2015

Client Source IP - SSL pass through

Hi, the Cisco smart space needs to know the source IP address of the client to register it and accept the traffic. Also SSL termination cannot be done on F5 due to some limitation of application. so ...
application delivery
cisco
deployment
LTM
shaggy's avatar
shaggy
Icon for Nimbostratus rankNimbostratus
Jan 22, 2015
it depends on why the application would not work before when a clientssl profile was applied. a clientSSL profile will terminate the client's SSL session on the F5, and the serverSSL will re-encrypt back to the pool member. if coupled with an http profile with x-forwarded-for enabled, the backend device should be able to use the x-forwarded-for header as the client-ip