Big-IP configuration with Intrusion Detection device for ssl traffic

Hi Robert,

 

 

Decrypting the SSL on LTM is a very common practice. LTM is generally going to be more efficient than the servers at this. And it simplifies the cert administration. And it allows you to easily use an IPS to inspect the decrypted HTTP off a single port. So I'd say it's a good solution that you've arrived at.

 

 

Aaron