For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

avnishvyas_1974's avatar
avnishvyas_1974
Icon for Nimbostratus rankNimbostratus
May 24, 2016

Outbound IP forwarding VIP hitting a HTTPS website but not authenticating SSL

Hello People I was requested to configure an outbound VIP to an external resource which would use HTTPS so there is an element of SSL involved here, However as this is an outbound connection. The SSL...
application delivery
devops
LTM
ssl
Chris_Grant's avatar
Chris_Grant
Icon for Employee rankEmployee
May 24, 2016

I would suggest taking a packet capture (tcpdump) on the BigIP filtered on the client's IP. This will allow you to see what is happening on the SSL handshake that might be causing a failure. Depending on the cause this is probably not something that can be fixed on the BigIP. I would suggest the following tcpdump string:

tcpdump -s0 -i 0.0:nnn -w /var/tmp/ssl.pcap host

where is the IP address of the system that is initiating the connection. Use ctrl-C to stop the capture. You will need to copy this off box to review in wireshark or another similar packet capture analysis tool. You are specifically interested in the Client and ServerHellos.