Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

VFB's avatar
VFB
Icon for Cirrus rankCirrus
Jul 06, 2018

re-encrypt with different cipher on server-ssl profile?

Is it possible to set a client ssl profile to cipher with diffie-helman and re-encrypt on the server ssl side to RSA? I presume this would be taxing on the device, but I need to understand the ins an...
application delivery
big-ip
LTM
Al_7443's avatar
Al_7443
Icon for Nimbostratus rankNimbostratus
Jul 06, 2018

Yes, it's supported. The LTM decrypts and re-encrypts traffic anyway so there is no huge difference in doing this. If you only have RSA in the suites accepted by your back-end server then the LTM will do it automatically. If not, create a server SSL profile with custom ciphers.