Introduction:
In today's complex customer environments, there are usually a firewall (such as F5) and Load Balancer (such as NetScaler) in front of the TIM
and the Web Server(s). This traffic is typically encrypted.
Question:
Why I am not able to see traffic from my firewall/load balancer in the TIM logs?
Environment:
CA APM 10.1
TIM 10.1
Linux 6.x
Answer:
For TIM to see traffic, the following must be in place:
- Hardware Filters (MTP, if applicable)
- Web Server Filters
- SSL Private Keys (for SSL applications)
- Two Way Traffic (round trip)
- Supported SSL Ciphersuites and functionality (for SSL applications)
Additional Information:
Please see the CA APM Administration Guide for more on TIM Placement or CEM Insertion Location:
https://docops.ca.com/ca-apm/10-1/en/administrating/cem-configuration/networking-alternatives-for-cem/about-cem-insertion-locations