Forum Discussion

Frank_Catapano_'s avatar
Frank_Catapano_
Icon for Nimbostratus rankNimbostratus
Dec 16, 2015

SSL cert 128 in with 256 out, F5 middleman

Is it possible to use the BigIP LTM to accept an SSL 128 connection in and to then make an SSL 256 connection out? We have an Internal app that only supports 128 at the moment connecting to a custom...
application delivery
BIG-IP
LTM
Amine_Kadimi's avatar
Amine_Kadimi
Icon for MVP rankMVP
Dec 16, 2015

Short answer is Yes.

 

F5 is acting as a full proxy device. This means that on each side, client-side and server-side, there is a separate connection. One of the multiple advantages of such architectures is that you can customize each of the two connections separately to match your specific needs. In your case a 256 bit key-size in one side and 128 bit in the other.