Forum Discussion
Core_Matrix_174
Nimbostratus
NimbostratusiRule to Decide which VS to use.
The point of this is that we have multiple domains and therefore need multiple SSL Client side profiles, as you can only have 1 SSL profile per VS we would need multiple VSs. This would mean having t...
Kevin_Stewart
Employee
EmployeeSNI will be in the client's CLIENTHELLO message. The fourth packet of the connection is first packet of the SSL negotiation after the TCP three-way handshake. Toward the bottom of your capture you'll see a section in the CLIENTHELLO message for extensions, and one called "Server Name".
Websense, I believe, is also capable of doing SSL man-in-the-middle, which is probably what you've encountered. BIG-IP can also do SSL man-in-the-middle, called ProxySSL, but that won't allow you to do redirects based on the URI.
