Forum Discussion

autopoiesis's avatar
autopoiesis
Icon for Altostratus rankAltostratus
Dec 12, 2022

Forward proxy with SSL passthrough - SWG license required?

Hi, At one site with a single v15 VE I need to proxy outbound traffic, but without SSL inspection.  Most docs relating to SSL passthrough assume that targets are internal and pooled but this is not ...
application delivery
forward proxy
ssl passthrough
Mike757's avatar
Mike757
Icon for MVP rankMVP
Dec 12, 2022

Hi auto,

If you want to use explicit proxy in the internal clients, you can use this "recipe":

https://community.f5.com/t5/technical-articles/configure-the-f5-big-ip-as-an-explicit-forward-web-proxy-using/ta-p/286647

I'm not sure this can be adapted to transparent proxy. I would imagine you don't need the DNS resolver in that case, but the HTTP profile might not make sense either.

I'm almost sure I've done something similar in the past with an iApp, but maybe I had the SWG module provisioned. I really can't recall.

Hope it helps!

/Mike