Forum Discussion

Deepak_k_226543's avatar
Deepak_k_226543
Icon for Nimbostratus rankNimbostratus
Apr 18, 2016
Solved

ASM deployment

I have SLB in Reverse proxy mode for 3 internal vlan traffic.For those 3 vlan i'm using trunk on my slb for internal network. After the SLB i have WAF in Inline mode. Traffic is passing. i want to kn...
application delivery
ASM Advanced WAF
BIG-IP
security
Jason_Meurer_39's avatar
Jason_Meurer_39
Historic F5 Account
Apr 19, 2016
The SSL Intercept deployment is intended for outbound (forward proxy) traffic and may not be the correct solution here. Is your issue that the WAF you have deployed cannot sit on the Trunked ports or that the traffic on the server side connection is HTTPS encrypted? If the issue is that the server side connection is encrypted, you will want to ensure you are using an RSA based SSL cipher on the server side connection. Most WAFs can import your RSA based key and decrypt in flight. DHE/ECDHE based ciphers prevent L2 based WAFs from sitting inline.