Forum Discussion

fanttazio_23961's avatar
fanttazio_23961
Icon for Altostratus rankAltostratus
Jul 20, 2016

SSL offloading issue with MSSQL

Hello all, We have a setup where f5 does the SSL offloading for our MSSQL server but looks like when we enable this feature the client cannot establish the connection to the server. When we disable...
application delivery
BIG-IP
LTM
security
Seattle2k's avatar
Seattle2k
Icon for Employee rankEmployee
Jun 25, 2020

The bypass is necessary (or, removal of the SSL Profile), because SQL traffic uses the TDS protocol. WIth TDS/TDS7, there is a PRELOGIN message that is sent by the client, prior to the beginning of the SSL/TLS handshake. The client-ssl profile is not expecting this, and resets the connections as non-SSL/TLS traffic.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Oct 04, 2020

    thanks for sharing the technical details