Forum Discussion

Julio_Navarro's avatar
Julio_Navarro
Icon for Cirrostratus rankCirrostratus
May 02, 2016

HTTPS true "End to End" encryption

Hello!

 

I am searching for information/explanation in regards for true "End to End" encryption on a LTM Config.

 

We do have a dilemma with our auditors when the LTM is listening on port 443 but doesn't have the SSL Cert and the Pool of members assigned to the VIP does have it.

 

They say that "between the user and the LTM the information is not encrypted."

 

Any light for this "urban legend"?

 

Thank you

 

J

 

encryption end to end
LTM
security

1 Reply

  • ekaleido's avatar
    ekaleido
    Icon for Cirrus rankCirrus
    May 02, 2016

    The auditors would be wrong. But if you want to use the cert on your LTM you will gain much more agility with regards to the traffic and what you can do to it with irules and such.

     

    You will need to import your cert and key to the LTM (System->File Management->SSL Certificate List) and then create a client SSL profile (Local Traffic->Profiles->SSL->Client).