Forum Discussion
Andrew-F5
Oct 30, 2019Employee
- ltm virtual cmst.dieboldnixdorf.com-443 {
- destination 10.38.85.45:https
- ip-protocol tcp
- mask 255.255.255.255
- pool cmst.dieboldnixdorf.com-8443
- profiles {
- cmst.dieboldnixdorf.com {
- context clientside
- }
- diebold-http { } <---- Remove this
- diebold-tcp { }
- serverssl {
- context serverside
- }
- }
Your current configuration asks the F5 to manage an impossible situation of manipulating encrypted HTTP content (HTTPS/TLS) without being able to decrypt it.
You cannot use a client-side HTTP profile without a client SSL profile.