For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

andrew_C1's avatar
andrew_C1
Icon for Nimbostratus rankNimbostratus
Apr 28, 2016

issues capturing client and server side SSL handshake (only TCP profile on VIP)

Hi, im trying to capture both the client and server side of a SSL neg. I can capture the client side hand shake fine but i only seem to be able to catpure payload post ssl/tls neg on the server side....
application delivery
iRules
LTM
Greg_Labelle's avatar
Greg_Labelle
Icon for Nimbostratus rankNimbostratus
Apr 28, 2016

Because the virtual server is not configured with any SSL profiles, you will not be able to inspect the traffic as the F5 cannot decrypt it.

 

This should work if you add a client and server ssl profile (ssl bridging) to the virtual server. Once that is in place, the F5 can decrypt the traffic, and your iRule should work.