Forum Discussion
TD_388740
Nimbostratus
NimbostratusL7 https ACL with APM SSL VPN not working
Hi,
I am building a POC for Client SSl VPN with F5 APM in AWS.
Since we are using AWS I would like to use L7 ACLs instead of L4 since IP addresses keep changing in AWS.
I got it working for http...
Stanislas_Piro2
Cumulonimbus
CumulonimbusDo you want to use L7 ACL to filter URL inside a Network Access tunnel?
If this what you expect, the problem is that HTTPS is not HTTP with secured content but HTTP inside a TLS tunnel...
So until you don't terminate the TLS tunnel on the bigIP, you can't read the HTTP request, and so you can't read the URL...
when you create a virtual server with clientSSL profile, it terminate the SSL allowing you to read the HTTP request.