For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Gebo's avatar
Gebo
Icon for Nimbostratus rankNimbostratus
Oct 12, 2023

How to configure virtual server with web server that requires ssl certificate from clients ?

Greetings everyone, My environment is basically a web hosting datacenter, some web applications  requires ssl authentication from clients attempting to connect with these services. The web server it...
application delivery
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Oct 12, 2023

Hi Gebo , 

F5 Bigip can do this , bigip IP can give the servers the upper hand to terminate ssl connections without intervensions by using the proxy ssl feature  , look at this articles contain more details and steps to do that : 
https://my.f5.com/manage/s/article/K13385
https://techdocs.f5.com/content/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-11-5-0/13.html

using proxy ssl leverages you : 

  • The BIG-IP system to process encrypted application traffic.
  • The server to retain final authority to directly authenticate and grant access to the client.
  • To use the following BIG-IP system functions:
    • The iRules read or write application data.
    • The BIG-IP ASM security policy inspects and protects web application traffic.
    • The BIG-IP AAM system optimizes application traffic.
    • The system passes client certificates to servers that require mutual authentication.

I hope this helps you 🙂