Proxy Handhsake failure

The log I sent you is from the client where TrendMicro agent is installed.

If I remove proxy from the configuration, the agent can be activate.
If I put the proxy in the configuration I receive the handshake error.
If I put the proxy in my browser settings, I can navigate withous any problem.

Is there any way to trace what BIG-IP proxy is doing for my client?

It's sounding more and more like a trend micro issue not liking the f5 in the middle.

But you can use tcpdump to see the flows. So things like

 tcpdump -nni 0.0:nnnp 'host 192.168.201.37 ' -s0  -vvv

or

 tcpdump -nni 0.0:nnnp 'port 8081' -s0  -vvv

Add -w /var/tmp/<filename>.pcap to the dump to capture the output and then you can review it in wireshark.

This should allow you to see the flows, the port 8081 one might look the best at the moment so you can see in and out. Or if you know the client IP add that with a or so 'host 192.168.201.37  or host 10.10.10.1' for example that should then let you see in and out.

I did it some days ago using Wireshark, but I didn't find anything interesting.

Would you check the attached log?

Thank you for your patience

No i can't see anything major either!
I would either talk to f5 support, or trendmicro support to look at there logs.

I can see connections, and http 200 so connections are happening.  So where the error is and why has to be application side, or at least the information for why may be there!

Thank you.

I'm trying to contact F5 support because TrendMicro said it's not their problem.

Last info: this are logs from F5 console

What does irule_http_proxy do?