Forum Discussion
Core_Matrix_174
Nimbostratus
Oct 22, 2012iRule to Decide which VS to use.
The point of this is that we have multiple domains and therefore need multiple SSL Client side profiles, as you can only have 1 SSL profile per VS we would need multiple VSs. This would mean having t...
Kevin_Stewart
Employee
Oct 22, 2012SNI will be in the client's CLIENTHELLO message. The fourth packet of the connection is first packet of the SSL negotiation after the TCP three-way handshake. Toward the bottom of your capture you'll see a section in the CLIENTHELLO message for extensions, and one called "Server Name".
Websense, I believe, is also capable of doing SSL man-in-the-middle, which is probably what you've encountered. BIG-IP can also do SSL man-in-the-middle, called ProxySSL, but that won't allow you to do redirects based on the URI.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects