Forum Discussion
Disable SSL server profile with CPM policy
Hi friends,
I'm trying to disable SSL server profile on a VS with CPM policy. But unfortunately, I'm not able to make it works. My policy is very simple : - if host = secure.internal.com --> use server SSL profile and forward to secure WEB pool - if host = unsecure.internal.com --> do not use server SSL profile and forward to unsecure web pool
On my VS, Server SSL profile is set. So, the first rule works. But the second does not, SSL server profile is not disable. Have a look on my policy. I don't know if the action "server-ssl disable" works on CPM because I can not set any parameter on this action.
2 Replies
- Matt_Dierick
Employee
The workaround is to use this irule, but I would like to make it works with CPM :
when HTTP_REQUEST { if { [HTTP::host] equals "unsecure.internal.com"}{ SSL::disable serverside } else { SSL::enable serverside } } - Matt_Dierick
Hi Kevin,
Thanks for your analyse. I could have done tcpdump to check that ;-) I'm gonna raise a case and use the irule in the meantime.
Do you know who is the first player between CPM and iRule when both of them use HTTP_REQUEST ?
Take care Matt
