Forum Discussion
Jason_19901
Nimbostratus
NimbostratusSSL offload to IPS
New to the forum. I am decrypting SSL traffic on the F5 and would like an iRule to send the unencrypted data to an IPS before it gets encrypted again on its way to the node. Is this possible?
Michael_YatesNimbostratus
NimbostratusYou might want to investigate utilizing Clone Pools to see if it will do what you are needing.
SOL8573: Overview of port mirroring and clone pools
http://support.f5.com/kb/en-us/solutions/public/8000/500/sol8573.html?sr=13486642
Clone Pools can be configured to capture one way or two way traffic (Traffic to the Server from the Client - Clone Pool (Client) and traffic to the Client from the Server - Clone Pool (Server)). It does this during SSL tear down if the traffic is encrypted.