Forum Discussion
Draven_186334
Altocumulus
Oct 10, 2018SWG use a iRule to set SSL Server SSL profile for different internet base websites
Hello,
Using F5 SWG explict proxy, I need to set an irule to set the "SSL::cert mode ignore" for a few websites eg
news.com as the full certificate chain is not being delivered to the F5 proxy...
Kevin_Stewart
Employee
Oct 10, 2018For a pure SWG explicit (SSL) forward proxy implementation, you could simply do something like this:
when SERVERSSL_SERVERHELLO {
SSL::cert mode ignore
}
You could also enable/disable this function by matching against the incoming SNI from the Client Hello.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
