For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

OTS02's avatar
OTS02
Icon for Cirrus rankCirrus
Aug 24, 2015

SNI External Monitor for ADFS

Kevin Stewart solved the mystery of why my built-in GTM monitor would not work against our ADFS servers (https://devcentral.f5.com/questions/monitor-for-adfs-server-gtm). The ADFS servers require SNI...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 25, 2015

It may be worthwhile to test this manually. Execute the openssl command by itself, and if it succeeds you'll be left with an empty prompt (not the shell prompt). Type the following at that prompt to send the HTTP request:

GET /adfs/ls/idpinitiatedsignon.aspx HTTP/1.1
Host: adfs.open-techs.com
[two carriage returns]

If the SSL handshake and HTTP request were correct you should see the text of the HTTP response. This is essentially what the script is doing. By the way, I removed the "/adfs/ls/idpinitiatedsignon.aspx" URI from the GET line in the last script, so you'll probably want to re-add that. If all of that works, then it's just a matter of figuring out what you're going to be grepping for in the script.