Forum Discussion

cpt_154228's avatar
cpt_154228
Icon for Nimbostratus rankNimbostratus
Jun 25, 2017

Sending a traffic feed of decrypted TLS traffic to an external intrusion detection system

I'm trying to set up an intrusion detection system (Suricata) which inspects TLS decrypted traffic from our f5 (of VIPs on which we do TLS offloading).   My initial thoughts were that I could sim...
BIG-IP
LTM
security
Morten_Marstran's avatar
Morten_Marstran
Icon for Nimbostratus rankNimbostratus
Jun 26, 2017

Hi,

 

You can do this by assigning the clone pool to the server side context:

 

tmsh modify /ltm virtual 'virtual_name' clone-pools add { 'pool_name' {context serverside } }