For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

autopoiesis's avatar
autopoiesis
Icon for Altostratus rankAltostratus
Dec 12, 2022

Forward proxy with SSL passthrough - SWG license required?

Hi, At one site with a single v15 VE I need to proxy outbound traffic, but without SSL inspection.  Most docs relating to SSL passthrough assume that targets are internal and pooled but this is not ...
application delivery
forward proxy
ssl passthrough
autopoiesis's avatar
autopoiesis
Icon for Altostratus rankAltostratus
Dec 13, 2022

Many thanks for the link, Mike.  This looks pretty similar to the description of the other, iApp-based solution; I'll test and give some feedback.

All the best,

auto

  • autopoiesis's avatar
    autopoiesis
    Icon for Altostratus rankAltostratus
    Dec 19, 2022

    Hmm, no joy.

    I get CONNECT entries logged on the explicit proxy VS, but nothing at all on the wildcard (the CONNECTs are followed by http-keep-alives and their ACKs from :8080, until timeout).  Same behaviour regardless of whether the target URL is http, or https.

    It's as if nothing is being passed from the explicit proxy through to the wildcard proxy.  I've rechecked that the config and don't believe I missed anything.  But TBH I don't understand quite how the 'connection' from explicit VS ->wildcard VS is supposed to work in the first place.

    Any pointers/tips welcome.