Forum Discussion
tstott707
Nimbostratus
NimbostratusTroubeshooting website connection
We are using BIG-IP with LTM and SSLO to inspect web application traffic. What are good troubleshooting techniques to go through the device when a website doesn't establish connection? We would want ...
By "these modules", I'm assuming you mean "the SSL Orchestrator module". We do have a deployment guide over here that is very comprehensive:
https://clouddocs.f5.com/sslo-deployment-guide/sslo-11/
Reading the deployment guide will give you a good understanding of how the SSL Orchestrator module works and how to set it up.
SWG and SSLO essentially use the same architecture but the setup is somewhat different, as you've no doubt found. We generally recommend using SSLO to perform the setup, then using "SWG as a Service" to perform custom authentication, auditing, or authorization logic as needed. That is covered here:
https://clouddocs.f5.com/sslo-deployment-guide/sslo-11/chapter3/page3.06.html
zamroni777
Nacreous
Nacreoususually i use tcpdump to analysze the ssl and http layer.
for encrypted traffic, add --f5 ssl option:
https://my.f5.com/manage/s/article/K31793632
tstott707Thanks Zamroni777. Will add this to the troubleshooting steps as well