Forum Discussion

siru_129409's avatar
siru_129409
Icon for Nimbostratus rankNimbostratus
Jun 14, 2015

Enabling ASM on a https Virtual Server...?

Hi,

 

I have a https Virtual Server currently working in ssl transparent mode (no certificate is installed in F5). Now I would like to enable ASM on the same virtual server, so i just want to know is it necessary to install SSL Certificate for the https virtual server (SSL bridging) in order to configure ASM ?

 

Any help would be highly appreciated...!

 

ASM Advanced WAF
deployment
security
ssl

2 Replies

  • Hannes_Rapp's avatar
    Hannes_Rapp
    Icon for Nimbostratus rankNimbostratus
    Jun 14, 2015

    Indeed, for that you will have to configure a clientside SSL profile and decrypt the traffic. The ASM module can not inspect encrypted traffic at L7.

     

    If for whatever reason you have to route encrypted traffic to end-server, you can also configure both, a clientside and a serverside SSL profile which will help you retain a similar level of network security. In such setup, F5 will offload the SSL to process ASM security-checks, and re-encrypt any permitted traffic prior to routing the requests to backend servers.