Forum Discussion

sysadmin_209494's avatar
sysadmin_209494
Icon for Nimbostratus rankNimbostratus
Jun 24, 2016

F5 LTM 11.6 with IIS 6

We are currently running an application that is in IIS6/Windows 2003 R2 SP2. The SSL cert that resides on the app is SHA1 and we'll need to renew it in 2 months to SHA2. From what I've researched i...
application delivery
iis
LTM
Arie's avatar
Arie
Icon for Altostratus rankAltostratus
Jun 27, 2016

Do you even need SSL in the DMZ?

 

Either way, it is best practice to terminate SSL on the BIG-IP - even if you re-encrypt the traffic before it leaves the BIG-IP. Client-side and server-side SSL are entirely independent of each other so you should have no issues using SHA1 between the BIG-IPs and the EOL web servers.