For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jwittenmyer's avatar
jwittenmyer
Icon for Nimbostratus rankNimbostratus
Apr 05, 2022

HSTS for ADFS Load Balancer

I'm using BIGIP LTM as a load balancer for two ADFS servers as part of a hybrid Exchange deployment.  I need to enable HSTS on the load balancer virtual server.  Enabling HSTS requires an SSL profile...
security
Daniel_Wolf's avatar
Daniel_Wolf
Icon for MVP rankMVP
Apr 10, 2022

Hi jwittenmyer,

even though the iApp for ADFS is deprecated, you can still follow the archived deployment guide. The config parameters and values described in Appendix A: Manual Configuration tables are still applicable.
Your use case is described in the chapter named Configuring the BIG-IP LTM for load balancing AD FS or AD FS proxy servers: SSL Bridging.

From my memory - pay attention to the server name in the serverssl profile. ADFS requires SNI.

KR
Daniel