F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Eric_Frankenfie's avatar
Eric_Frankenfie
Icon for Nimbostratus rankNimbostratus
Feb 14, 2013

Client SSL Authentication

I have a virtual server using a client SSL profile to offload SSL processing, but I would like to take this a step further and require SSL client authentication to prevent man in the middle attacks. ...
config
design
Eric_Frankenfie's avatar
Eric_Frankenfie
Icon for Nimbostratus rankNimbostratus
Feb 14, 2013

Is it possible to authenticate to a specific certificate such as clientA.example.com and clientB.example.com or will anything signed by *.example.com be sucessfully authenticated. Maybe an iRule...

 

if client certificate is in client_auth_dataGroup

 

then permit

 

else

 

discard