5. Create a Transparent Forward Proxy SSLO

The majority of enterprise forward proxy configurations will involve a single or HA pair of F5 platforms performing the SSL visibility task. The SSL Orchestrator has been designed with that principle in mind and performs robust and dynamic service chaining of security devices.

SSL Orchestrator makes configuration of a single-box deployment simple and intuitive. Please follow the steps below to create a transparent forward proxy SSL Orchestrator configuration.

• 5.1. Review the lab environment and map out the services and endpoints
• 5.2. Fulfill the SSL Orchestrator pre-requisites
• 5.3. Create the SSL Orchestrator deployment through Guided Configuration
  • 5.3.1. Initialization
  • 5.3.2. Configuration review and prerequisites
  • 5.3.3. Topology Properties
  • 5.3.4. SSL Configurations
  • 5.3.5. Services List
  • 5.3.6. Service Chain List
  • 5.3.7. Security Policy
  • 5.3.8. Interception Rule
  • 5.3.9. Egress Setting
  • 5.3.10. Log Settings
  • 5.3.11. Summary
• 5.4. Testing the deployment
  • 5.4.1. Server certificate test
  • 5.4.2. Decrypted traffic analysis on the security services
• 5.5. Create the SSL Orchestrator deployment for Secure Web Gateway (SWG)
  • 5.5.1. Initialization
  • 5.5.2. Configuration review and prerequisites
  • 5.5.3. Topology Properties
  • 5.5.4. SSL Configurations
  • 5.5.5. Services List
  • 5.5.6. Services Chain List
  • 5.5.7. Security Policy
  • 5.5.8. Interception Rule
  • 5.5.9. Egress Setting
  • 5.5.10. Log Settings
  • 5.5.11. Summary
• 5.6. Configuring custom SWG Per-Request Policies and URL Category Filters
• 5.7. Creating an SWG per-request policy
• 5.8. Applying the new Per-Request policy to SSL Orchestrator
• 5.9. Testing URL filtering
• 5.10. This concludes the SSL Orchestrator lab