201 · Question #300
Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?
The correct answer is C. As long as client traffic was directed to the alternate port, the virtual server would work as intended. A virtual server configured with a ClientSSL profile will successfully perform SSL termination on any specified destination port, not just 443, as long as clients direct their traffic to that port.
Question
Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?
Options
- ASSL termination could not be performed if the virtual server's port was not port 443.
- BVirtual servers with a ClientSSL profile are always configured with a destination port of 443.
- CAs long as client traffic was directed to the alternate port, the virtual server would work as intended.
- DSince the virtual server is associated with a ClientSSL profile, it will always process traffic sent to
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- C76% (26)
- D15% (5)
Why each option
A virtual server configured with a ClientSSL profile will successfully perform SSL termination on any specified destination port, not just 443, as long as clients direct their traffic to that port.
SSL termination is a function of the ClientSSL profile and the BIG-IP's capabilities, not strictly limited by the port number; it can occur on any configured virtual server port.
This statement is incorrect; virtual servers can be configured with a ClientSSL profile and listen on any port, not exclusively port 443.
The ClientSSL profile on a virtual server instructs the BIG-IP to decrypt incoming client-side SSL traffic. While port 443 is the standard for HTTPS, SSL/TLS itself is a protocol that can operate over any TCP port. Therefore, as long as the virtual server is configured to listen on a specific port (e.g., 8443) and client traffic is directed to that alternate port, the BIG-IP will apply the ClientSSL profile and terminate SSL successfully.
This statement is incomplete, but if it implies that traffic would only be processed on 443, it is incorrect. The virtual server processes traffic on its configured destination port, regardless of the port number.
Concept tested: Client-side SSL (ClientSSL) port flexibility
Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-system-ssl-administration/working-with-ssl-profiles.html
Topics
Community Discussion
No community discussion yet for this question.