Forum Discussion
It really depends on your requirement but leaving the setting to ignore means the system ignores certificates from the server if they present one. Leave it at ignore unless you Require that the server is presenting a valid certificate. If you server is listening on port 443 they still need the SSL server certificate loaded.
The SSL server profile re-encrypts traffic to the pool acting as a SSL client over port 443. As long as the host name in the request to the VIP matches the Servers certificate it should work. But unless you have a need to inspect the client traffic to make a layer 7 decision or insert an HTTP header like X_Forwarded_For there is no need to terminate the SSL on the F5? You could pass it through your 443 VIP with no SSL client or server profile using a pool with nodes set for port 443.