For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

fraguet_53463's avatar
fraguet_53463
Icon for Nimbostratus rankNimbostratus
Aug 20, 2014

Disable ssl server profile with LTM policy

Hi

 

I have a vs listening with both client and server ssl profiles and a default pool.

 

For a specific URI, i want to send trafic to another pool with non-ssl trafic.

 

I would prefer using LTM policy rather than Irule. This is what i have done :

 

  • in the "conditions" part of the query :

 

  • in the "actions" part of the query

 

When i make a tcpdump, the F5 send trafic to the new pool but still crypted.

 

Thanks for your help

 

Fred

 

application delivery
design
LTM

3 Replies

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    Aug 20, 2014

    Hello, Depending on jour bigip version this feature is bugged.

     

    On 11.5.1 HF4, it works.

     

    :( but there is another bug that un apply when you modify jour VS.

     

    I suggestions you to use irule instead fort the moment

     

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Aug 21, 2014

    ID427687 - policy action 'server-ssl disable' doesn't work

     

    it is fixed in 11.5.0.

     

    if upgrade is not an option, you may try to open a case and see if support team can provide an engineering hotfix.