Forum Discussion

Aaron_Largent's avatar
Aaron_Largent
Icon for Nimbostratus rankNimbostratus
Oct 13, 2017

Two-way (mutual) SSL Authentication on server side?

One of my internal apps needs to call an external API that requires mutual SSL auth.   Can my app call my LTM, and my LTM call the external API with mutual auth?   I only see the ability to do ...
application delivery
authentication
BIG-IP
LTM
security
ssl
Kevin_Davies's avatar
Kevin_Davies
Icon for MVP rankMVP
Oct 13, 2017

You need SSL tunnelling. This is where the F5 does not handle the SSL traffic at all. Just create a simple virtual server with SNAT automap, a pool and that it. No HTTP profile, no SSL profiles. Then the client negotiates SSL with the backend server directly and the F5 is not involved at all.