For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

pdar's avatar
pdar
Icon for Nimbostratus rankNimbostratus
Sep 11, 2019

SSLO Decryption policy question

I am currently looking through SSLO docs for a F5 transparent proxy use case. Unfortunately, getting the information that I need is time sensitive and I was wondering if you were willing to help. B...
BIG-IP
security
Andrew-F5's avatar
Andrew-F5
Icon for Employee rankEmployee
Sep 13, 2019

Since SSLO configurations change significantly between versions it would be helpful to know what version you are using first; both the BigIP version and SSLO (E.g. v14.1.0 5.4.47).

 

Generally speaking you would create the items you noted as two separate rules within your security policy and make sure to have the inspect above the bypass in the ordered list, otherwise the bypass will match first due to the wildcard matching "-test".