For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

minkyu's avatar
minkyu
Icon for Nimbostratus rankNimbostratus
Jul 10, 2017

how to decrypt SSL Traffic with virtual server

hi, i am difficult because i don't know how to decrypt SSL Traffic with virtual server i try that my virtual server client ssl profile has cert, key on specific site. but i see packet with wireshark,...
application delivery
LTM
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jul 10, 2017

Hi,

 

Where you see encrypted traffic - between client and virtual server (VS)? Is so it's as it should be. Only traffic between BIG-IP and backend servers will be decrypted in such case - this is classical SSL Offload scenario:

 

Traffic between client and VS is encrypted using clientssl profile BIG-IP decrypts traffic (so you can inspect it on BIG-IP) Decrypted traffic is send to backend servers (pool members) - so again you can monitor anything here because it's not encrypted.

 

Piotr