For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Alexi's avatar
Alexi
Icon for Nimbostratus rankNimbostratus
Dec 20, 2021

Possible to proxy outbound SSL connection?

First, I apologize if this is a newbie question. I am fairly new to working with F5's.   Issue: I have a client with pretty weak ciphers. It can't connect to www.abc.com (example) because it has...
BIG-IP
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Dec 21, 2021

Yes this is posible. You can setup een explicit forward proxy. For example, you can use this iApp: https://devcentral.f5.com/s/articles/apm-explicit-proxy

 

Note that you don't need APM when SSL inspection isn't required.

 

Manual configuration is also possible. See this:

https://devcentral.f5.com/s/articles/configure-the-f5-big-ip-as-an-explicit-forward-web-proxy-using-ltm-32268

 

With use of a PAC file, it's possible to only send requests to www.abc.com via the proxy.