For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kirimaya's avatar
Kirimaya
Icon for Nimbostratus rankNimbostratus
Aug 17, 2022

F5 SSL-O service chaining issue

Dear F5 Expert, I just implement SSL-O offload in Explicit proxy topologies and off-load SWG in explicit proxy mode. I found the issue detail as below. Security policy Catagorie lookup ALL (Pinne...
application delivery
security
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 22, 2022

Well, specifically because an SWG per-request policy would have no effect on encrypted traffic. SSLO intentionally bypasses security services (ie. ICAP, HTTP, SWG) that cannot process encrypted traffic).