F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Core_Matrix_174's avatar
Core_Matrix_174
Icon for Nimbostratus rankNimbostratus
Oct 22, 2012

iRule to Decide which VS to use.

The point of this is that we have multiple domains and therefore need multiple SSL Client side profiles, as you can only have 1 SSL profile per VS we would need multiple VSs. This would mean having t...
application delivery
dev
devops
iRules
Mohamed_Lrhazi's avatar
Mohamed_Lrhazi
Icon for Altocumulus rankAltocumulus
Oct 22, 2012
1. Websense probably has a root cert/key that the browser trusts and can therefore generate a server cert/key dynamically

 

 

That sounds like defeating the third party authority idea behind SSL certs.... in a way, no?

 

 

But then again, googling a quick bit I saw this sentence :

 

 

To implement SSL decryption for your end users, you need a root certificate on each client machine that acts as a Certificate Authority for SSL requests to the cloud proxy.

 

 

In this doc: http://www.websense.com/content/support/library/web/hosted/admin_guide/ssl_enable.aspx

 

 

I dont know Wensense, but would be curious to know if they are doing anything more interesting that.