Planning to put a F5 load balancer in front of IronPort ESAs to spread the SMTP traffic from internet. We have couple of concerns. Can the SSL acceleration feature in the F5 be turned off? Apparently, the TLS communication between internet source and IronPort server will be interrupted due to this feature. Is F5 load balancer "session aware"? I mean, does it forcefully disable/disconnect a session between source and destination (IronPort) for any reason?

Hi, SSL offloading can be not used.Yes, it can forcefully disconect session based on time-outs, security settinng. I have implementation like yours and there is no issues.

Forum Discussion

Chandan_Viswesw

Nimbostratus

Jul 31, 2014

Concerns over F5 Load balancer's co-existence with IronPort ESAs

Planning to put a F5 load balancer in front of IronPort ESAs to spread the SMTP traffic from internet. We have couple of concerns.

Can the SSL acceleration feature in the F5 be turned off? Apparently, the TLS communication between internet source and IronPort server will be interrupted due to this feature.
Is F5 load balancer "session aware"? I mean, does it forcefully disable/disconnect a session between source and destination (IronPort) for any reason?

1 Reply

Vitaliy_Savrans
Nacreous
Aug 01, 2014
Hi,

SSL offloading can be not used.
Yes, it can forcefully disconect session based on time-outs, security settinng. I have implementation like yours and there is no issues.