Load-balanced VIP without SSL-Offload?

[Zenith]

Hi guys, We' ve looked through the documentation but cannot seem to get a definitive answer on this, any input would be great! Fortigate 100D on FortiOS 5.0. We' d like to load-balance HTTPS across two servers however when configuring the Virtual Server on the Fortigate there doesn' t seem to be an option to do it without SSL Offloading? Our preference would be to terminate the SSL session on the servers themselves, and as we are not doing any real inspection of the traffic I don' t see why the FG cannot just pass the traffic straight through? Thanks! Philip

[Carl_Wallmark]

Hi Philip, I guess you want to just load balance the traffic ? Try to set the type to " TCP" and change the port to 443, in that case it should ignore the type of traffic and only pay attention to the port which is 443.

[Zenith]

That would make a lot of sense thank you :), I' ll give it a try now!

[Zenith]

That did it thanks!