For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

JohnCPetrucci_3's avatar
JohnCPetrucci_3
Icon for Nimbostratus rankNimbostratus
Feb 06, 2019

Policy using SNI SSL Extension requires HTTP profile VS?

When I attempt to apply my policy to a virtual server, I receive the error:

 

Virtual server /Common/xxx requires a profile of type http for ltm policy /Common/yyy.

 

Why is HTTP needed for a policy that only references a TLS / SSL extension? Server Name Indication is a function of TLS, not HTTP, right?

 

application delivery
BIG-IP
iRules

2 Replies

  • uzair's avatar
    uzair
    Icon for Nimbostratus rankNimbostratus
    Feb 25, 2019

    LTM policy is applicable to HTTP virtual servers. You can assign multiple ssl profiles, with SNI configurations to virtual server, LTM policy is not required.

     

  • Stanislas_Piro2's avatar
    Stanislas_Piro2
    Icon for Cumulonimbus rankCumulonimbus
    Feb 25, 2019

    Http profile when condition or action is defined at request time. Change to at ssl client hello time to prevent it!