For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ray_Rakib's avatar
Ray_Rakib
Icon for Nimbostratus rankNimbostratus
Sep 25, 2019

HTTP Header Insertion using LTM

  Hi All,   I have created an iRule to do HTTP header insertion, as I need to do this to restrict tenant access to Ms Office 365 for our internal users.   My understanding is that I need t...
application delivery
BIG-IP
LTM
Ray_Rakib's avatar
Ray_Rakib
Icon for Nimbostratus rankNimbostratus
Sep 25, 2019

Hi Dan

 

I tried your suggestion and disabled the SSL Forward Proxy option on the client & server SSL profiles. Now client PCs can connect to internet sites such as BBC, however they get "Not Secure" certificate warning on their browser.

 

When you check the properties of the certificate warning on the browser. The Certificate Path shows my Internal CA server cert, then the cert that resides on the F5 LTM (which was signed by my CA server). I think I should see a third cert in the chain (third cert being that of the destination server i.e BBC)?

 

Any further suggestions?