For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

m1978_295079's avatar
m1978_295079
Icon for Nimbostratus rankNimbostratus
Jun 07, 2017

SSL communication via 443 without any certificate

I got a set up here client - F5 - server. Client talks with F5 via https port 443. I cant see any client ssl profile in Virtual server. so my question is how SSL working here without any certificate ...
BIG-IP
devops
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Jun 07, 2017

Hi,

 

To do SSL Offload on F5 you need at least:

 

Standard type VS Clientssl profile assigned to VS

 

I any above condition is not meet there is no SSL Offload performed by VS, and if client can establish SSL session then you have SSL Passtrough as already mentioned - client is talking directly with pool members.

 

You can easily check it doing tcpdump on BIG-IP external and internal VLANs.

 

Piotr