Forum Discussion

Nimbostratus

Feb 09, 2018

L4 forward with certificate check

scenario is User(access with certificate - self signed ) --- > LB (L4 forward) --- > Backend server with certificate (self signed) when LB does L4 forward and when tried to connect with certifi...

LTM

security

Martijn_144688

Cirrostratus

Feb 09, 2018

Saravana,

Is the user authenticated with a client certificate, or do you user the F5 for SSL decprytion and encryption?

If you want the use the F5 to decrypt and encrypt traffic, you need a Standaard virtual server. See;

K12015: Configuration requirements for SSL virtual servers, profiles, pools, and monitors

If the client authenticates to the back-end server with a certificate and you get a invalid certificate (which is not strange with self-signed certificates), you can take a look at the root CA's on client and server.

Maybe you can give us more details about your setup?

Regards, Martijn.