Forum Discussion

fcocquyt_104704's avatar
fcocquyt_104704
Icon for Nimbostratus rankNimbostratus
Feb 11, 2013

F5 with SSL

Hi Everyone,

 

 

I have a question on setup possibilities for F5 loadbalancing with regards to Siebel CRM.

 

We currently have some environments where we initially access Siebel over a VIP with SSL for the logon part of the application but after logon we switch to non-ssl for the remainder of the session. We have an iRule that filters out “/Analytics” traffic from the uri to redirect to 2 different server pools.

 

Some time ago for a new project we had a requirement to go full ssl meaning that the entire session will run in ssl mode. At that time we were told that the F5 does not support filtering on the uri together with SSL.

 

Do you know if this is correct and possibly suggest an alternative? If no alternative is available we may need to revise the security requirements.

 

 

 

Thanks for any help here !

 

Fred.

 

config
design

2 Replies

  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    Feb 11, 2013
    As long as you're terminating the SSL on the F5 device, then you have all of the capabilities that you had before. You can optionally re-encrypt the data to the Siebel servers and still be able to inspect the URI (and other payload) data within.