Lab 1.7: Outbound Interception Rules¶

Task 1 - Interception Rules¶

1. Login to the BIG-IP with Firefox

2. Navigate to SSL Orchestrator ‣ Deployment ‣ Interception Rules and click:

   

3. Click Install Default Rules…

   

4. Under Proxy Settings, configure these options:

   Property	Value
   Proxy Scheme	Transparent and Explicit
   Proxy Server : Port	10.20.0.150 : 3128

   

5. Under Security ‣ SSL, select Create New. This will redirect to a separate page for configuring SSL settings.

   

6. Name the configuration ssloT_ob_ssl

   

7. In the Client section, for Certificate Key Chains, select default.crt and default.key, and then click Add

   

8. Under CA Certificate Key Chains, select subca.f5demolabs.com.cer and subca.f5demolabs.com.key, and then click Add.

   

9. In the Server section, select ca-bundle.crt for Trusted Certificate Authority. Leave all other settings at the defaults. Click Finished.

   

10. The screen should have returned to the original Install Default Rules page. Under the Security section, from the Per Request Policy drop-down select Create New

    

11. Name the policy ssloP_ob_pol

    

12. Under TCP Service Chain, add and order the available services to both the Intercept Chain and Non Intercept Chain:

    

13. Repeat step (12) for UDP Service Chain

14. Click Finish.

15. Under Ingress Network ‣ VLANs, choose /Common/client-net from the Available VLANs and add to the Selected section.

    

16. Click Finish.