Forum Discussion

Mahmoud_Saad_19's avatar
Mahmoud_Saad_19
Icon for Nimbostratus rankNimbostratus
Mar 02, 2015

F5 ASM offloading to Weblogic server

Hi,

 

I'm using ASM to secure a weblogic server, i have two virtual servers. one virtual server for HTTPS & the other one for HTTP ( redirect irule). Users are using a mobile application to show reports from published server. Using tcpdump shows that login traffic is hitting the HTTPS virtual server and they login successfully. but then when they try to open any report the traffic is going through the HTTP virtual server although it's only made for https redirct. an error appears saying "HTTP Status code 302 Found", i'm new to F5 i tried several options without success.

 

any help ?

 

ASM Advanced WAF
deployment
oracle
security

3 Replies

Sort By
  • Rommy_178938's avatar
    Rommy_178938
    Historic F5 Account
    Mar 03, 2015

    Good day Mahmoud.

     

    Please try one of the following options:

     

    1. Enable rewrite redirects (I believe this is found on the SSL profile). This will instruct the BIG-IP to rewrite any redirects that the web server sends to the client from http:// to https://

       

    2. Force your webapp to send out redirects to itself using not http://

       

    1 tends to be the easiest.

    Regards, Rommy

     

  • mrshaggy_169440's avatar
    mrshaggy_169440
    Icon for Nimbostratus rankNimbostratus
    Jun 04, 2015

    Hi all,

     

    I have a similar question regarding ASM and SSL profile. I have an ASM policies that attach to VS that use SSL profile. If i didn't use the SSL profile anymore on my VS, which mean that I didn't do any SSL termination on F5 anymore, did my ASM could still do inspection to any HTTPS traffic of my application? I can't find from ASM documentation that to inspect HTTPS traffic we should do SSL termination on F5 or not.

     

    Thanks before,

     

    Shaggy