Forum Discussion

D99's avatar
D99
Icon for Cirrus rankCirrus
Mar 15, 2021

How to enable websocket secure connection for f5 vip 14.1.2.8

Hi Experts,

 

We have a virtual server with SSL offloading enabled. Now application will have some wss url's which needs to be allowed through F5. F5 version running is 14.1.2.8. Will this be enabled by default or any steps to enable WSS protocol on VIP. There is also a ASM profile in block mode attached to the VIP

 

Thanks a lot in advance

application delivery
BIG-IP
LTM
security

1 Reply

Sort By
  • eey0re's avatar
    eey0re
    Icon for Cirrostratus rankCirrostratus
    Mar 16, 2021

    You must have Allowed WebSocket URLs to your ASM policy. Your policy might not have these added automatically, especially if it came from an earlier version of ASM.

     

    Navigate to the correct partition, and then: Security > Application Security > URLs > Allowed URLs > Allowed WebSocket URLs. Ensure you have the correct policy selected from the drop down, and that there are wildcard WS/WSS URLs (or more specific ones, if you want).

     

    Without any Allowed WebSocket URLs, websockets will be blocked by ASM.