For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Apr 28, 2014

HTTPS is really just HTTP wrapped in SSL. So if you offload the SSL, you're left with (clear text) HTTP. In order to see any layer 7 application payload, you must terminate the SSL first. You can optionally re-encrypt to the server, but that isn't expressly required.