201 · Question #211
Refer to the exhibit. A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the application is NOT working. Which actional configuration is regard to resolve th
The correct answer is A. Configure SSL Profile (Client). For a Virtual Server to handle HTTPS traffic, an SSL Client Profile must be configured to decrypt incoming encrypted connections from clients.
Question
Refer to the exhibit. A BIG-IP Administrator configures a Virtual Server to handle HTTPS traffic. Users report that the application is NOT working. Which actional configuration is regard to resolve this issue?
Exhibit
Options
- AConfigure SSL Profile (Client)
- BConfigure Protocol Profile (Server)
- CConfigure Service Profile HTTP
- DConfigure SSL Profile (Server)
How the community answered
(44 responses)- A89% (39)
- B2% (1)
- C2% (1)
- D7% (3)
Why each option
For a Virtual Server to handle HTTPS traffic, an SSL Client Profile must be configured to decrypt incoming encrypted connections from clients.
When a Virtual Server is configured to handle HTTPS traffic, it needs to decrypt incoming encrypted connections from clients. An SSL Client Profile specifies the SSL/TLS protocols, ciphers, and certificates that the BIG-IP system uses to establish a secure connection with a client. Without an SSL Client Profile configured on the Virtual Server, the BIG-IP cannot decrypt the HTTPS traffic, preventing the application from working.
A Protocol Profile (Server) is typically a TCP profile and does not directly handle the SSL/TLS encryption for HTTPS client connections.
A Service Profile HTTP refers to an HTTP profile, which processes HTTP-layer traffic, but SSL decryption must occur before the HTTP profile can process the clear text.
An SSL Profile (Server) is used for re-encrypting traffic when the BIG-IP connects to a backend server, not for decrypting initial client connections to the Virtual Server.
Concept tested: BIG-IP Virtual Server SSL Client Profile for HTTPS decryption
Source: https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-ssl-administration-13-1-0/2.html
Topics
Community Discussion
No community discussion yet for this question.
