Disclaimer: I am not a network engineer but a software engineer so I may muddle my terminology, feel free to correct me where I go wrong!
My understanding of our set-up is:
We have a Netscaler (lets say F5) with valid (signed/trusted CA) SSL Certificates installed that are returned to clients. The Netscaler in turn communicates with our back-end servers running Windows 2008R2 and IIS 7 etc. These serve up websites/services via HTTPS (443) with their own certificates... However, these certificates may NOT be valid/trusted/signed.
In my world of "direct" communications I know that I would expect to see an error/warning saying that the certificate cannot be trusted. However, I am unsure how Netscaler would handle this condition. Would it return an error to the client or simply relay the data with Netscalers valid certificate? Would it throw some kind of error? Is this configurable etc?
Thank you very much.