SSL offloading support for Internet Explorer 6
In some cases the Internet Explorer 6 web browser may be able to access real servers. To resolve this issue, disable the ssl-send-empty-frags
option:
config firewall vip
edit vip_name
set type server-load-balance
set server-type https
set ssl-send-empty-frags disable
end
You can disable this option if SSL acceleration will be used with an old or buggy SSL implementation that cannot properly handle empty fragments.