For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nik_67256's avatar
Nik_67256
Icon for Nimbostratus rankNimbostratus
Aug 14, 2012

Connection Mirroring & Virus Detection

    Hello ALL,     Would apprecuate any inputs in understanding the following :     1) Is connection mirroring is related to SSL session state on failover? If not then whats the ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Aug 15, 2012
Connection mirroring copies the connection table entry and its state to the peer unit. With connection mirroring, the client would be able to resume an existing connection after a failover.

 

 

SSL session cache mirroring would copy the shared SSL key, session ID, cipher spec, and version. With SSL cache mirroring, the client would be able to resume an existing SSL session after a failover.

 

 

I don't think there is an option to strip bad attachments but allow the request. You could potentially disable blocking on the ICAP violation and insert a header using an iRule that indicates the attachment is bad.

 

 

You could also submit a request for enhancement to allow for removing a bad attachment.

 

 

Aaron