For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

skethi_183651's avatar
skethi_183651
Icon for Nimbostratus rankNimbostratus
Jan 21, 2015

How to Use Web Server for SSL instead of F5 via F5

Hello,   I am trying to use the Certs that are installed on the webserver instead of the certs on the F5. how can i achieve it.  
BIG-IQ
ibm
shaggy's avatar
shaggy
Icon for Nimbostratus rankNimbostratus
Jan 21, 2015

are you looking to offload SSL on the F5 using the web-server's certificate, or are you looking to terminate SSL at the web-server instead of the F5?

 

shaggy's avatar
shaggy
Icon for Nimbostratus rankNimbostratus
Jan 21, 2015
in the virtual server configuration of the application's virtual server configured for HTTPS, remove the clientSSL profile and serverSSL profile. When you remove a client SSL profile from a virtual server, the F5 loses the ability to examine HTTP-level data as F5 is now passing encrypted data through the F5 rather than terminating SSL and re-encrypting to pool members. Therefore, if you use any of the following features/profiles, they will also need to be removed - HTTP, oneconnect, cookie-based persistence, http-compression, stream profile, analytics profile, HTML profile, web acceleration profiles, iRules that use HTTP events/functions, LTM policy profiles that have HTTP-related statements, etc.