Forum Discussion
NimbostratusSSL Profile settings value
Hi, We use the LTM Version 10.2.4 HF4 and 11.2.1 HF9 There is some different, using SSL profile on F5's. on f5 with 10.2.4 if I choose the Value "Client certifacete" ignore then there is no Frequency option visible. by using 11.2.1 always visible. I just wondering what is the different? Is there any affect on the settings?
Thanks /skywalker/
3 Replies
- Kevin_Stewart
Employee
The Frequency setting is only relevant when doing some form of client certificate authentication (request or require). It basically determines how often the the client is challenged for their certificate (once - once at the beginning of the session, or always - at the beginning and at every renegotiation). The always setting is arguably more secure, but adds significant overhead as the client certificate is challenged and validated every time SSL is renegotiated.
skywalkerThanks Kevin, What does mean if the option frequency with the version 11.2.1 nevertheless appears, after ignoring the Client Certificate?
/skywalker/
- Kevin_Stewart
If you're just talking about the visibility of the option in the management GUI, then that's just a function of the GUI in that particular version. The frequency option is only relevant when enabling client certificate authentication (request or require).
