For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

f5beginner's avatar
f5beginner
Icon for Cirrostratus rankCirrostratus
Jul 11, 2019

F5 as a Proxy

Hello All, I have one simple question, what is needed to set up F5 as a full proxy. I suposed it is done by setting basic settings of virtual server or is there something what is needed to set up ? ...
BIG-IP
security
f5beginner's avatar
f5beginner
Icon for Cirrostratus rankCirrostratus
Jul 12, 2019

Hi Stanislas,

 

problem is, that I do not have SSL, Forward Proxy license.

 

Thank you

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Jul 12, 2019

    as you can see in the article I wrote, you can use proxy without SSL, Forward Proxy license... in this case, BigIP doesn't decrypt TLS connections but accept it.

    • Nicol4s's avatar
      Nicol4s
      Icon for Nimbostratus rankNimbostratus
      Jul 12, 2019

      Hi Stanislas,

      I'm running a cluster w/ TMOS v13 without SSL Forward Proxy license.

      I've followed your article but I end up with the HTTP 503 error in the clients web browser.

       

      However, your configuration works on my 3rd BIG-IP ( VE Lab license with SSL Forward Proxy included )

       

      Any idea ?

       

      Thanks.

    • Stanislas_Piro2's avatar
      Stanislas_Piro2
      Icon for Cumulonimbus rankCumulonimbus
      Jul 12, 2019

      I hope you did not configure section « ENABLE SSL FORWARD PROXY » which requires ssl forward proxy license

    • Nicol4s's avatar
      Nicol4s
      Icon for Nimbostratus rankNimbostratus
      Jul 12, 2019

      I can confirm that I did NOT configure section « ENABLE SSL FORWARD PROXY »

       

      Still no dice.