Forum Discussion

PSPK's avatar
PSPK
Icon for Nimbostratus rankNimbostratus
Dec 16, 2020

Log the TLS version of a client connecting to a TCP VIP with no HTTP or client-ssl Profile

Hello,   I have a TCP VIP on port 995 with no HTTP Profile or client-ssl profile. There are several clients that makes SSL connections to this VIP. I need to know the client SSL/TLS version. ...
application delivery
Do
iRules
LTM
security
TLS Verison
Mayur_Sutare's avatar
Mayur_Sutare
Icon for MVP rankMVP
Dec 17, 2020

Hi, Fully agreed with  , As your setup is SSL Pass-through, BigIP is not participating in encryption. You should map associated profiles on the VS to understand the traffic being processed. Here as you want F5 to inspect SSL Handshake, you should configure client SSL profile on it.