Forum Discussion
Brad_Parker
Cirrus
If you want to still be able to use an HTTP profile you will have to select the Proxy SSL option in both of your profiles. That will also require your pool members to support all the ciphers you make available in the client SSL profile and you will need to disable Diffie-Hellman ciphers. https://support.f5.com/kb/en-us/solutions/public/13000/300/sol13385.html
If you don't need to use an HTTP profile you can just remove both of your client and server SSL profiles.
Amr_Ali
May 20, 2023MVP
how we can disable Diffie-Hellman ciphers, for a server-side profile I will create a custom one and attach to it the public certificate and key for the backend server ???!!!!