Forum Discussion

skethi_183651's avatar
skethi_183651
Icon for Nimbostratus rankNimbostratus
Jan 21, 2015

How to Use Web Server for SSL instead of F5 via F5

Hello,   I am trying to use the Certs that are installed on the webserver instead of the certs on the F5. how can i achieve it.  
BIG-IQ
ibm
skethi_183651's avatar
skethi_183651
Icon for Nimbostratus rankNimbostratus

I have also read something about Proxy SSL on the Server Profile and Client profile. will this work for my issue?

 

Brad_Parker's avatar
Brad_Parker
Icon for Cirrus rankCirrus
Jan 22, 2015
As shaggy said, if you are using any Layer 7 events including HTTP, which requires an HTTP profile means you will require a client SSL profile. I don't think you can control the Layer 7 packet flow in proxy mode, I believe that is more for inspection for logging. If you are currently doing SSL offload, there's no problem with re-encrypting with a server SSL profile to still have an SSL handshake with the backend server.