MTLS and Virtual Traffic Manager

[dhanrajbs]

Hi There,

We are in process of configuring MTLS on Nginx and would like to expose Nginx using Virtual Traffic Manager, the question is, does Virtual Traffic Manager supports MTLS, if yes could someone please share documentation regarding the same?  

[dhanrajbs]

The underlined question over here is does Virtual Traffic Manager supports MTLS ? 

[rhenders]

Hi  Dhanrajbs,

Although the Traffic Manager does support mTLS, the documentation does not use 'mtls' or Mutual TLS terms. 

You can either require a client cert or request an optional certificate on the Virtual Server configuration.  For Pools, there are configuration options for which client cert to present when requested by the backend server nodes.

In addition, there are supported TrafficScript functions (TLS 1.2 and lower- not supported on TLS 1.3) for example that can request a certificate based on the headers.  Please note that Ivanti Support does not write or provide custom TrafficScript but there are good examples here on the Community Pages and the TrafficScript Guide.