For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

igorzhuk's avatar
igorzhuk
Icon for Altostratus rankAltostratus
Oct 10, 2018

F5 With explicit proxy

Hi, How I can configure explicit proxy my client go to the application in the outside, the application has a client certificate request I need that f5 send certificate websites   Do I need add i...
application delivery
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 10, 2018

So just to be clear,

 

  • Explicit forward proxy is different that SSL Forward Proxy. An explicit forward proxy is simply a forward proxy that the client knows about and has to talk to directly to reach external resources. By itself, an explicit forward proxy does not decrypt TLS traffic. An SSL Forward Proxy is designed specifically to decrypt outbound TLS traffic by forging the server certificate to the local client.
  • You CANNOT perform SSL Forward Proxy (decrypt and re-encrypt) on traffic that requires a client certificate. You may technically be able to statically define a certificate and key in the SSL Forward Proxy server SSL profile, but then this one certificate would be used for all server-side client cert TLS handshakes.