Easy redirect?

Well, if you want to send a redirect in response to an HTTPS connection, you still have to complete the handshake to send the redirect, so even if you are terminating SSL on the BIG-IP, that won't really relieve you of the problem of the expiring .com cert.

But to redirect any request for a bcbsal.com host to the same hostname.subdomain @ bcbsal.org, you could use a rule like this:

when HTTP_REQUEST {
if { [HTTP::host] contains "bcbsal.com"} {
HTTP::redirect https://[getfield [HTTP::host] ".bcbsal.com" 1].bcbsal.org[HTTP::uri]
}
}[

(You would NOT want to include the second condition if you are going to apply this rule to an HTTPS virtual, or any request with a host header NOT containing bcbsal.com will be caught in an endless redirect loop.)

HTH

/deb