For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MarekHudak's avatar
MarekHudak
Icon for Nimbostratus rankNimbostratus
Oct 25, 2019

Without SSL profiles user is not able to access website

Hello guys,   would you be so kind and help me with problem related to SSL profiles?   It is strange, but without SSL profile user is not able to reach web site (virtual server) where is pool...
application delivery
BIG-IP
LTM
Andrew-F5's avatar
Andrew-F5
Icon for Employee rankEmployee
Oct 30, 2019
  1. ltm virtual cmst.dieboldnixdorf.com-443 {
  2. destination 10.38.85.45:https
  3. ip-protocol tcp
  4. mask 255.255.255.255
  5. pool cmst.dieboldnixdorf.com-8443
  6. profiles {
  7. cmst.dieboldnixdorf.com {
  8. context clientside
  9. }
  10. diebold-http { } <---- Remove this
  11. diebold-tcp { }
  12. serverssl {
  13. context serverside
  14. }
  15. }

 

Your current configuration asks the F5 to manage an impossible situation of manipulating encrypted HTTP content (HTTPS/TLS) without being able to decrypt it.

 

You cannot use a client-side HTTP profile without a client SSL profile.