Forum Discussion

Alexi's avatar
Alexi
Icon for Nimbostratus rankNimbostratus
Dec 20, 2021

Possible to proxy outbound SSL connection?

First, I apologize if this is a newbie question. I am fairly new to working with F5's.   Issue: I have a client with pretty weak ciphers. It can't connect to www.abc.com (example) because it has...
BIG-IP
security
Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Dec 21, 2021

Yes this is posible. You can setup een explicit forward proxy. For example, you can use this iApp: https://devcentral.f5.com/s/articles/apm-explicit-proxy

 

Note that you don't need APM when SSL inspection isn't required.

 

Manual configuration is also possible. See this:

https://devcentral.f5.com/s/articles/configure-the-f5-big-ip-as-an-explicit-forward-web-proxy-using-ltm-32268

 

With use of a PAC file, it's possible to only send requests to www.abc.com via the proxy.