For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

meena_60183's avatar
meena_60183
Icon for Nimbostratus rankNimbostratus
Jun 17, 2009

SSL offload, ASM and server SSL

Hi All,     I have a web application that is configured on the LTM and SSL termination is done on the F5 with a valid cert and encrypted again with a self-signed cert on the backend to make...
app sec
BIG-IP Access Policy Manager (APM)
security
Benjamin_9036's avatar
Benjamin_9036
Historic F5 Account
Jun 17, 2009
Hey Meena,

 

 

This is certainly possible, so long as the LTM is decrypting the traffic from the client. In fact, with the ASM as a module on the same device, this shouldn't require that different a configuration at all. With your client and server SSL profiles configured just as they would normally be, you can simply configure your HTTP Class with ASM enabled, assign it to the virtual server (along with an HTTP profile if one was not already present), and you should be set to go.

 

 

Cheers!

 

 

// Ben