Forum Discussion

scarville's avatar
scarville
Icon for Nimbostratus rankNimbostratus
Mar 07, 2022
Solved

Apply a Policy to an SNAT list

I have a SNAT list which translates outgoing traffic from a particular internal IP to a pool of external IPs. This is used for proxying to tax agency sites. Recently we got dinged on a "security" au...
application delivery
  • SamCo's avatar
    SamCo
    Mar 08, 2022

    Hello,

    To apply such a policy to https traffic, clientssl and serverssl profile will be necessary, and also and http profile, as the policy is intended to modify the http traffic.

    If you have such a configuration, it seems there is even no way to set a condition matching selected pool. Then you should probably write an iRule for this, or  find another matching solution (like source ip of the server hosting the scrapper maybe ?)

    Cheers,

    Sam

SamCo's avatar
SamCo
Icon for Cirrus rankCirrus
Mar 08, 2022

Hello,

To apply such a policy to https traffic, clientssl and serverssl profile will be necessary, and also and http profile, as the policy is intended to modify the http traffic.

If you have such a configuration, it seems there is even no way to set a condition matching selected pool. Then you should probably write an iRule for this, or  find another matching solution (like source ip of the server hosting the scrapper maybe ?)

Cheers,

Sam