For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

atoth's avatar
atoth
Icon for Cirrus rankCirrus
May 08, 2019

Is it possible to do both 1 way AND 2 way SSL on a single VIP?

So I have a requirement to set up a vip for 2way SSL. The client connects to the site and the site serves the page. This should be simple. However, once the client connects to the site, the site d...
LTM
security
Vinit_Ajgaonkar's avatar
Vinit_Ajgaonkar
Icon for Nimbostratus rankNimbostratus
May 08, 2019

Hi Atoth,

 

Modifying the client authentication in the SSL profile can allow for the VIP to be configured as both 1-way and 2-way.

 

However from a security standpoint it kind of nullifies the Cert based authentication becuase even users who dont pass the auth check can get through.

 

Client authentication options in ClientSSL profile are as below: 1. Require(Strict and requires client cert authentication) 2. Request(Not strict for client cert authentication for the ssl session to be established) 3. Ignore(Default)

 

Regards, Vinit