F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

shopkeeper56_23's avatar
shopkeeper56_23
Icon for Cirrostratus rankCirrostratus
Apr 08, 2016

Transparent Proxy HTTPS Issues

Hi, I am in the process of setting up a transparent proxy with LTM, which will be load balancing browsing traffic two different internet connections. There is a requirement that I direct traffic fo...
application delivery
LTM
security
Michael_Koyfman's avatar
Michael_Koyfman
Icon for Cirrocumulus rankCirrocumulus
Apr 08, 2016

Do you have SSL Forward Proxy license? It is not included in LTM license by default. What about URL filtering license? Try to remove iRules altogether and test to see if they are causing a problem?

 

  • shopkeeper56_23's avatar
    shopkeeper56_23
    Icon for Cirrostratus rankCirrostratus
    Apr 08, 2016
    I do have the URL Filtering license... I did not know SSL Forward Proxy required additional license... Looking now it doesn't look like I have it. I'm running this on a StrongBox at the moment (POC for client). I'll update my license and test again. Could you by chance provide the part number for the forward proxy license? Thanks EDIT: nvm found the part number F5-ADD-BIG-SSLFWD-VE
  • shopkeeper56_23's avatar
    shopkeeper56_23
    Icon for Cirrostratus rankCirrostratus
    Apr 08, 2016
    A bit annoying the Deployment Guide mentions URL filtering license but not the SSL Forward Proxy one
  • shopkeeper56_23's avatar
    shopkeeper56_23
    Icon for Cirrostratus rankCirrostratus
    Apr 12, 2016
    updated information
  • Michael_Koyfman's avatar
    Michael_Koyfman
    Icon for Cirrocumulus rankCirrocumulus
    Apr 12, 2016
    Are you still having an issue then? BTW, URL Filtering license does include SSL Forward Proxy license(or rather it is supposed to) - so I am suspecting your licensing was correct. Is the original post accurately describing an issue you're seeing?
  • shopkeeper56_23's avatar
    shopkeeper56_23
    Icon for Cirrostratus rankCirrostratus
    Apr 12, 2016
    See my posts below this one with updated results. I think SSL forward proxy was not included in URL filtering, because as soon as I activated the forward proxy license on my strong box the SSL interception started working. But when I activated the iRule from the deployment guide, SSL inspection bypass works but inspection fails.