For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Amr_Ali's avatar
Amr_Ali
Icon for MVP rankMVP
May 04, 2023

server SSL Profile setting

In the Server SSL profile we have under The Server Authentication section of the Server SSL profile ( server certificate ) and the default action is ignore, my question here is what is mean  ignore,...
application delivery
security
Amr_Ali's avatar
Amr_Ali
Icon for MVP rankMVP
May 04, 2023

Do you mean her when the LTM acts as a client during the connection between it and the back-end web server, it accepts any certificate sent from the server even if expired

AlanMoen's avatar
AlanMoen
Icon for Cirrus rankCirrus
May 04, 2023

Yes. I found this by accident when one of my AD teams let their server certs expire but the LTM kept chugging along. I'm kinda surprised it's the default setting and I've changed that in my environment for security reasons.