Forum Discussion

mframpton_60606's avatar
mframpton_60606
Icon for Nimbostratus rankNimbostratus
Oct 22, 2008

MSSQL Monitor w/Encryption

We have an environment (for PCI) that requires all connections coming in and out to be encrypted. I'd like to set up a MSSQL monitor to the databases in this environment, but I cannot find any settings to tell the monitor connection to the database to be encrypted. Anyone know if this is possible with the LTM or if there's plans to so? We're running 9.3.1.

 

 

TIA!

4 Replies

  • I don't think there is support for encryption on the existing MSSQL (DB_monitor) monitor. Maybe someone can comment on any plans for this.

     

     

    You could open a case with F5 Support and ask them to consider including it in a future version.

     

     

    If you need to perform an application layer check using an encrypted connection, you could potentially script an external monitor using freetds. It looks like they might support encryption for MSSQL server:

     

     

     

    http://www.freetds.org/userguide/freetdsconf.htm

     

     

    Field: encryption

     

    Options: off/request/required

     

    Default: off

     

    Description: Specify if encryption is desired. Supported for Microsoft servers. off disables encryption (only if needed); request means use if available; required means create and allow encrypted connections only.

     

     

     

     

    You can find example external monitors in the Codeshare:

     

     

    Advanced Design & Config CodeShare (Click here)

     

     

    Aaron
  • Thanks for the response! We did open a feature request with F5 about 2 years ago but they stopped updating us on it's status in 2007.
  • If it's already been requested a while back and not implemented, you might consider contacting your account manager and ask for an update. If they don't plan on implementing it soon, you could look into an external monitor.

     

     

    Aaron
  • Thanks! I have sent an email to our account manager, hopefully he will be able to pick up where the other person left off.