Forum Discussion

APezuela's avatar
APezuela
Icon for Nimbostratus rankNimbostratus
May 07, 2021

F5 SSL Proxy question

Hi,   We have some obsolete server in our infraestructure and like you now new servers doesn't allow protocolos like TLS1.0 by default. So we want to use F5 like a proxy between old a new server,...
BIG-IP
security
Rob_Stonham's avatar
Rob_Stonham
Icon for Cirrus rankCirrus
May 07, 2021

Apezuela,

 

I believe that you need to use the SAME certificate on the F5 as the back end server to use SSL Proxy, otherwise you will get the error you mention that's described here https://support.f5.com/csp/article/K13393

 

Have you tried having a clientssl profile and serverssl profile attached without the SSL Proxy tick box selected? I suspect that what you are actually wanting to achieve is what is described as "SSL Bridging" described here https://devcentral.f5.com/s/question/0D51T00006i7j36SAA/ssl-passthrough-ssl-offloading-and-ssl-bridging

 

Rob