Forum Discussion

Nimbostratus

Nov 11, 2013

A newbie basic question

I have a small sharepoint farm running in a lab environment. SharePoint is set with host header web apps and is running fine on one of the front ends. both web apps are running on port 80 and I hav...

BIG-IP Access Policy Manager (APM)

Employee

Nov 11, 2013

The deployment guide is a good place to start, but I'd add a few things:

DNS should just be pointing clients to the F5 VIP for SharePoint access.
Alternate Access Mappings can actually be dealt with in two ways: AAM settings in SharePoint, or HTTP Host header iRules applied to the F5 VIP. I personally prefer the former.
The deployment guide doesn't mention Kerberos, so you'll either need the Access Policy Manager (APM) module to do client side and server side Kerberos authentication, or you'll need the VIP FQDN to match the SPN of the Kerberos resources behind the F5 (with just LTM). Not sure which direction you're going here, so I won't dive into the specifics of either.