Which statement is true concerning SSL termination.

When a virtual server has both ClientSSL and ServerSSL profiles, the BIG-IP decrypts client-side SSL traffic and then re-encrypts it for the server-side. This full SSL proxy capability allows the BIG-IP to inspect and modify application-layer headers, making it fully compatible with cookie persistence. Cookie persistence relies on the BIG-IP being able to read and insert cookies into the HTTP stream.

While decrypting traffic at the BIG-IP allows iRules for deep traffic management, it offloads SSL processing from backend servers, which can reduce the overall load on the backend infrastructure, not necessarily increase the load on the BIG-IP in a way that makes the statement fundamentally true in context.

Only SSL traffic sent to that specific virtual server using a ClientSSL profile is decrypted; other virtual servers or unencrypted traffic would not be affected or decrypted by this profile.

If a virtual server has both ClientSSL and ServerSSL profiles, the BIG-IP performs both the client-side and server-side SSL handshakes. This means the pool members still perform SSL processing with the BIG-IP, rather than having less processing by default.