For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Frank_30530's avatar
Frank_30530
Icon for Altocumulus rankAltocumulus
Feb 07, 2018

Select ServerSSL Profile using VS Policy in TMOS 13.1: ERROR: an action precedes its conditions.

This concerns LTM on TMOS 13.1.0.2: We are configuring a virtual server with TLS SNI support (for example: site1.example.com and site2.example.com are using the same virtual server). We need to ...
application delivery
BIG-IP
LTM
Leonardo_Souza's avatar
Leonardo_Souza
Icon for Cirrocumulus rankCirrocumulus
Jan 16, 2020

If you have multiple serverssl profiles, the system should pick the correct one based on the SNI information from the clientside, or maybe the host header, haven't tested this yet.

That is where can be useful to have multiple serverssl profiles, as you can then setup the SNI to be sent in the server side.

 

You said you already know you can do with iRules.

In case you haven't see this iRule, have a look:

https://devcentral.f5.com/s/articles/serverside-sni-injection-irule-968

https://support.f5.com/csp/article/K41600007