SFTP decryption?

Question

I've seen old answers about SFTP decryption not being possible, but I want to check if that is still the case. I'm on 11.5.3, but would also like to know if something newer would make it possible. I would re-encrypt it to the pool member, but want to log some text from the session via an iRule.

kevin_stewart · Answer

Do you mean SFTP (FTP over SSH), or FTPS (FTP over SSL)?&nbsp;
AFM now has an SSH proxy functionality (https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-12-1-0/13.html?sr=58013811), but not sure if/how it can handle SFTP.&nbsp;
If you're talking about FTPS, then that can be done with FTP and SSL profiles.&nbsp;

Forum Discussion

SFTP decryption?

1 Reply

Recent Discussions

Reliable resources for identifying IP addresses

Maximum throughput of f5 ltm

Issue on license renewal

iRule cookie persistence and pool redirect

redirect not working

Related Content

Decrypt, Encrypt, Decrypt, Encrypt, Encrypt....

Decrypting BIG-IP Packet Captures without iRules

Decrypting BIG-IP Packet Captures Automatically

F5 Distributed Cloud - Regional Decryption with Virtual Sites

Decrypting TLS traffic on BIG-IP