F5CTSLTM6-B

BIG-IP LTM Specialist Packet Capture/Troubleshooting - TLS/SSL

Part of F5 Certified Technology Specialist, BIG-IP LTM

Targets: Product version not specified in the blueprint
Blueprint source: Official beta blueprint F5CTSLTM.032026.BETA (valid March-April 2026; beta exams until 2026-07-31), relayed by PRIME 2026-07-21 ↗

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by F5. Exam objectives, versions, and availability change, so always verify against the official blueprint.

Exam F5CTSLTM6-B: BIG-IP LTM Specialist Packet Capture/Troubleshooting - TLS/SSL

F5CTSLTM6.01 Given a set of headers or packet captures, determine a solution to an HTTP/HTTPS application problem
What to know:
- Investigate the cause of a specific response code
- Investigate the cause of an SSLHandshake failure
- Predict the browser caching behavior when application data is received (headers and HTML)
On this site: iRule SSL Handshake Events, Enabling and Disabling TLS Versions with the options Field
F5CTSLTM6.02 Given a direct packet capture, a packet capture through the LTM device, and other relevant information, determine the root cause of an HTTP/HTTPS application problem
What to know:
- Investigate the cause of an SSLHandshake failure
- Given a failed HTTP request and LTM configuration data determine if the connection is failing due to the LTM configuration
On this site: Client SSL vs Server SSL Profiles on BIG-IP, Cipher Ordering and Negotiation on BIG-IP
F5CTSLTM6.03 Given a direct packet capture, a packet capture through the LTM device, and other relevant information, determine a solution to an HTTP/HTTPS application problem
What to know:
- Describe the process to resolve an SSLHandshake failure
- Given a failed HTTP request and LTM configuration data determine the LTM configuration remedy
On this site: Certificates, Keys, and Chain Building in an SSL Profile, TLS 1.3 and TLS 1.2 Ciphers on BIG-IP
Tools: cipher
F5CTSLTM6.04 Given a scenario, determine from where the protocol analyzer data should be collected
What to know:
- Explain how to decrypt SSL traffic for protocol analysis
- Choose the appropriate protocol analyzer for troubleshooting a given problem (e.g., Wireshark, tcpdump)
- Identify application issues based on a protocol analyzer packet capture
On this site: Capturing Safely on a Production BIG-IP, Inbound TLS: Offload, Bridging, and Passthrough at the Reverse Proxy
Tools: f5-bigip-tcpdump-builder