Configure device specific SSLO settings

At the top of the page, view your services deployed in a topology on this device. To make any edits to security service configuration, select the name of the service and you will be directed to a page where you can make edits.

From BIG-IQ, navigate to

Configuration

SSL Orchestrator

Devices

.

Select a managed BIG-IP device from the

Devices

list.

Under

Device Settings

, specify whether you want this configuration to support IPv4 addresses or IPv6 addresses from the dropdown menu.

Under the

DNS

section, select either

Internet Authoritative Nameserver

to permit the system to send DNS queries directly out to the Internet, you can select

Local Forwarding Nameserver

.

Click the DNSSec Validation checkbox to specify whether you want to use DNSSEC to validate the DNS information.

If you selected

Local Forwarding Nameserver

in the above section, add one or more

Local DNS Nameserver

in the section

Local Forwarding NameServer(s)

.

Under

Routing

, select

Default

to allow the system to let all SSL intercept traffic use the default route, or select

Create New

to route the traffic through a custom Internet gateway. Add an

Address

and specify the

Ratio

to define the ratio of traffic sent to each device.

Under the

Logging Configuration

section, select a logging level for this device from the dropdown menu. You may select from Errors, Normal, or Debug.

You may enable the default log configuration by selecting the checkbox. For

Per-Request Policy

,

FTP

,

IMAP

,

POP3

,

SMTPS

, and

SSL Orchestrator Generic

(generic logs for the SSL Orchestrator configuration), select the level of severity that you would like to log for this data.

Select

Deploy

to push changes to this managed device.