A10SSLI4.1 - SSLi 4.1

Overview

Duration: 1.0 day

Instructs Network Operations, Development Operations, Network Security, and Architects on implementing a system to inspect SSL traffic.

Objectives

From two ACOS devices pre-configured in a Layer 3 base environment, students learn how to configure SSLi and the concepts behind how SSLi works:

• SSLi Concepts
• SSLi Configuration
• SSLi Bypass Features
• SSLi Troubleshooting

Content

SSLi Concepts

• SSLi Overview
• SSLi Traffic Flow

Deployment Topologies

• Layer 2 and Layer 3 Support
• Two Partitions on Single ACOS Device
• Two ACOS Devices

Configuring the Internal SSLi Device

• Access-List configuration
• VLAN configuration
• Server configuration
• Service Group configuration
• client-ssl template configuration
• Wildcard VIP configuration

Configuring the External SSLi Device

• Access-List configuration
• VLAN configuration
• Server configuration
• Service Group configuration
• server-ssl template configuration
• Wildcard VIP configuration

SSLi Bypass Features

• Static Bypass
• Web Category Bypass
• SNI Support

SSLi with ICAP

• ICAP Overview
• SSLi with ICAP

SSLi with Explicit Proxy

• Explicit Proxy Overview
• SSLi with Explicit Proxy
• Explicit Proxy Configuration

SSLi Troubleshooting

• Examining Traffic Flow
• AXDebug
• Show Techsupport

Audience

• Network Operations (NetOps)
• Development Operations (DevOps)
• Network Security (NetSec)
• Architects (Arch)

Prerequisites

• OSI reference model
• Network topology and administration
• An industry standard switching and routing CLI

Certification