F5CTSLTM6-B

BIG-IP LTM Specialist Packet Capture/Troubleshooting - TLS/SSL

Part of F5 Certified Technology Specialist, BIG-IP LTM

Targets: Product version not specified in the blueprint
Blueprint source: Official beta blueprint F5CTSLTM.032026.BETA (valid March-April 2026; beta exams until 2026-07-31), relayed by PRIME 2026-07-21 ↗

Independent study aid built from the public exam blueprint. Not affiliated with, authorized by, or endorsed by F5. Objectives are transcribed and mapped by hand, so this page may contain mistakes or may have fallen behind the vendor's current material: exam objectives, versions, numbering and availability all change without notice. Treat F5's own certification portal as the source of truth and verify against it before you book anything.

Exam F5CTSLTM6-B: BIG-IP LTM Specialist Packet Capture/Troubleshooting - TLS/SSL

F5CTSLTM6.01 Given a set of headers or packet captures, determine a solution to an HTTP/HTTPS application problem
What to know:
- Investigate the cause of a specific response code
- Investigate the cause of an SSLHandshake failure
- Predict the browser caching behavior when application data is received (headers and HTML)
On this site: iRule SSL Handshake Events, Enabling and Disabling TLS Versions with the options Field
F5CTSLTM6.02 Given a direct packet capture, a packet capture through the LTM device, and other relevant information, determine the root cause of an HTTP/HTTPS application problem
What to know:
- Investigate the cause of an SSLHandshake failure
- Given a failed HTTP request and LTM configuration data determine if the connection is failing due to the LTM configuration
On this site: Client SSL vs Server SSL Profiles on BIG-IP, Cipher Ordering and Negotiation on BIG-IP
F5CTSLTM6.03 Given a direct packet capture, a packet capture through the LTM device, and other relevant information, determine a solution to an HTTP/HTTPS application problem
What to know:
- Describe the process to resolve an SSLHandshake failure
- Given a failed HTTP request and LTM configuration data determine the LTM configuration remedy
On this site: Certificates, Keys, and Chain Building in an SSL Profile, TLS 1.3 and TLS 1.2 Ciphers on BIG-IP
Tools: cipher
F5CTSLTM6.04 Given a scenario, determine from where the protocol analyzer data should be collected
What to know:
- Explain how to decrypt SSL traffic for protocol analysis
- Choose the appropriate protocol analyzer for troubleshooting a given problem (e.g., Wireshark, tcpdump)
- Identify application issues based on a protocol analyzer packet capture
On this site: Capturing Safely on a Production BIG-IP, Inbound TLS: Offload, Bridging, and Passthrough at the Reverse Proxy
Tools: f5-bigip-tcpdump-builder

Public sources, used in good faith

These guides are independent study aids built from publicly available material: published exam blueprints, official product documentation, and vendor training catalogues. Product names, exam codes, and trademarks belong to their owners and are used only to identify the subject being taught. This site is not affiliated with or endorsed by any vendor named here. If you hold rights in material published on this page and believe it should be removed or corrected, please send the exact URL and a short note on the issue through the contact page; requests are reviewed promptly and in good faith. Read the full disclaimer →