Forum Discussion
Maria_Ramirez_5
Nimbostratus
NimbostratusHOW TO ASSOCIATE TWO SSL PROFILES TO A VIRTUAL SERVER
Hello,
I am María Ramírez, Presales Security Engineer of a reseller company called DIMENSION DATA.
I have a client who has a virtual server which has associated a ssl profile. This prof...
Dave_WileyNimbostratus
NimbostratusMaria:
If the traffic comes in on port 80 first, you could issue an HTTPS redirect to two different VIPS based on the URL domain.
I don't beleive a single VIP can be used to accomodate SSL offloading for two different certificates. The packets are encrypted with only the TCP header available for inspection until the data is unencrypted by using an SSL profile. At that point, it's two late to switch SSL profiles as one has already been applied.
Dave
