Chris_Phillips
Aug 14, 2012Nimbostratus
SSL offload headers for ASM
Hi,
Is there a way for an ASM box sitting behind an LTM box to know that SSL has been terminated on LTM? We add in similar headers for Weblogic which is behind ASM, but found that the allowed URLs on our ASM policies need to be defined as HTTP instead of HTTPS when it comes to ASM. As we have test environments where the LTM and ASM cohabit a single device, and therefore DO see HTTPS URLs this brings in a frustrating inconsistency when it comes to ASM policy.
Thanks
Chris