For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

4 Replies

  • KeesvandenBos's avatar
    KeesvandenBos
    Icon for MVP rankMVP
    Nov 14, 2016

    Are you using a client and server ssl profile and is the certificate on the webserver the same as the one used in the client ssl profile???

     

    If so, you should also remove the client and server ssl profile.

     

    Cheers,

     

    Kees

     

  • Leonardo_Accors's avatar
    Leonardo_Accors
    Icon for Cirrus rankCirrus
    Nov 14, 2016

    Hi Chethan,

     

    Your request is a little poor of details...I have created SSL VS (443) without http profile applied without problem. Big Ip will not inspect HTTP layer 7 traffic.

     

    No http profile means, as example, that you can't use HTTP events in iRules (like When HTTP_REQUEST...)

     

    regards

     

    Leonardo

     

  • David__Pasch's avatar
    David__Pasch
    Icon for Altostratus rankAltostratus
    Nov 14, 2016

    I think you need to leave it on, to support OneConnect. And while I can assume what you are doing in that iRule, it may also need the profile.

     

    Lastly, and not to get in your business, but I would scrub those configs and outputs a little better before posting them.

     

    Good Luck.

     

  • Leonardo_Accors's avatar
    Leonardo_Accors
    Icon for Cirrus rankCirrus
    Nov 15, 2016

    I agree with David, If that rule contains parts (like events) that need http profile you can't remove the http profile from VS.