How to filter VIP with SSL method

There's no details in the profile objects themselves that indicate that it is an ssl profile unless your nomenclature is set up that way and you're confident it's accurate. But you can do this with a tmsh script. You'll need to first build two lists, one each for client-ssl and server-ssl profiles, and then loop through each virtual's profiles to determine one or more matches. Logic would be something like this:

• if match client AND server profile, then traffic client->BIG-IP->server is encrypted on the wire but offloaded
• if match only client profile, then traffic to BIG-IP is encrypted, but to server is decrypted
• if match only server profile, then traffic to BIG-IP is decrypted, but to server is encrypted
• if match no profiles but the defined port (or port list if not standard 443/https),then traffic client->BIG-IP->server is encrypted on the wire and passthru

I think this gets you most of the way to where you want to go. You will likely want to communicate the state differently than I did, but the code is here now in the codeshare for you to adjust as you see fit.