For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

tnolet_112676's avatar
tnolet_112676
Icon for Nimbostratus rankNimbostratus
Mar 25, 2008

Does the X-Forwarded-For option in the profiles work with HTTPS?

Hi,     I'm currently the de-facto admin for our 1500-series Big-IP. I'm setting up the machine to insert the X-forwarded-For data into the headers of all HTTP traffic so that we can log origina...
application delivery
dev
devops
iRules
Mark_Curole's avatar
Mark_Curole
Icon for Nimbostratus rankNimbostratus
Mar 26, 2008
You need to look closely at the config manual for a client SSL profile. The simple profile just will not work.

 

 

First, you are going to have to either copy you public and private keys from you Apache config to the 1500s or you going to have to generate a new certificate and get it signed.

 

 

Then you will need to create a custom SSL profile the reference your public and private keys. Also, you will want to look closely at the Cipher configuration on the profile since I am assuming as a bank you would not want to do < 128 bit encryption.

 

 

https://support.f5.com/kb/en-us/solutions/public/7000/800/sol7815.html