Forum Discussion
Demonio_21719
Nimbostratus
NimbostratusDecrypt SSL traffic for IPS
How can we redirect traffic with F5 (vserver) to IPS, decrypting the traffic and then re-encrypt to receive the IPS to pass to the server? ...
IheartF5_45022
Nacreous
NacreousJust to clarify...so you want to decrypt, send to IPS, then re-encrypt to send to server? Please correct me if I am wrong.
Also do you want true IPS - as in Protection mode (so inline deployment required), or are you deploying an IPS as an IDS - Detection (so SPAN port will be OK)?
Demonio_21719Nimbostratus
NimbostratusHi, The idea is that the IPS service is INLINE mode.
We will continue to guide F5/Cisco, because recommend routing mode.
Thank you.
http://wtit.com/wp-content/uploads/2015/07/f5-white-paper-ngips-recommended-practices-f5-big-ip-and-ciscosourcefire-ngips-load-balancing.pdf
Thank you.
