For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Young_25175's avatar
Young_25175
Icon for Nimbostratus rankNimbostratus
Sep 29, 2017

Secure only login page and leave the rest of website as http

We want to secure a website by having F5 doing SSL offload. However, the web content has many http references and the browser complains about mixed content, specifically,   Mixed Content: The pag...
application delivery
iRules
LTM
security
johnbernardcheu's avatar
johnbernardcheu
Icon for Cirrus rankCirrus
Sep 29, 2017

Not possible unless you know content can be served via https...I had a go of your link and it cannot be served via https....see the link for additional info: https://devcentral.f5.com/questions/allowing-mixed-content-via-an-irule

 

On the other hand, if you have access to the website where the login is happening you could program the code to redirect to a non-https site...see the link for additional info: https://security.stackexchange.com/questions/36614/how-is-an-https-login-secure-when-pages-use-http