For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Spidey_29396's avatar
Spidey_29396
Icon for Nimbostratus rankNimbostratus
Aug 01, 2016

Is there any way to decrypt internet traffic coming from users internal

We have an F5, load balancing outbound traffic. Is there anyway to get the http[host] for https traffic? We are planning to have certain URL to be directed to one ISP,but i'm worried if users are acc...
application delivery
BIG-IP
PeteWhite's avatar
PeteWhite
Icon for Employee rankEmployee
Aug 01, 2016

The short answer is yes - but you have to use the SSL forward proxy feature. Put simply, this means that you install a certificate on the client machine and use that certificate on the F5 outgoing virtual server. The F5 can then have two tunnels - one from client to F5 and one from F5 to the website. You can then apply per-request policies or do any other checking that you want to do.