SSLO 202: More Use Cases with F5 BIG-IP SSL Orchestrator (AppWorld 2025 | 2 hours)

Note

This lab relies on UDF Blueprint: AppWorld 2025 - SSL Orchestrator 202

Developed and tested with BIG-IP 17.1.2 / SSL Orchestrator 11.1.8.

SSL Orchestrator was built to protect your organization from encrypted threats. In previous labs, you learned how to deploy inbound application mode (reverse-proxy) and outbound explicit (forward proxy) Topologies with security Inspection Services based on simple policies. Now, let's dive into some additional use-cases.

In this lab, you will learn how to:

• Deploy an inbound gateway mode (reverse-proxy) Topology to perform TLS inspection for multiple backend applications

• Implement an L3 outbound (transparent forward proxy) Topology with user confirmation for suspicious destinations

Expected time to complete: 90 minutes (excluding lab instructor presentations)

Pre-requisite: Basic familiarity with SSL Orchestrator is recommended, but not required.

CONTENTS

• 1. Lab Environment
  • 1.1. Accessing the Virtual Lab
  • 1.2. Lab Environment Details
• 2. Lab 1: Inbound Gateway Topology
  • 2.1. Inbound Gateway Scenario
  • 2.2. Pre-requisite Configuration
  • 2.3. Create an Inbound Gateway Mode Topology
  • 2.4. Testing the Deployment
  • 2.5. Module Completion
• 3. Lab 2: Outbound Transparent Forward Proxy with User Coaching
  • 3.1. User Coaching Scenario
  • 3.2. Deploy User Coaching Objects
  • 3.3. Deploy a Basic L3 Outbound Proxy Topology
  • 3.4. Verify Outbound Topology Functionality
  • 3.5. Implement User Coaching
  • 3.6. Enable User Justification
  • 3.7. Module Completion
• 4. Conclusion
• 5. Explore More SSL Orchestrator Labs
• 6. Contributors
• 7. Revision History
• 8. Lab Guide Repository (GitHub)
• 9. Appendices
  • 9.1. Presentation Slides