AD FS Monitor

I am currently setting up an AD FS farm, load balanced by the BigIP. Going off of some recommended configurations, I set up a custom https monitor. I;m having issues with the VS actually showing that the server is up based on the send string.

 

Send String GET /adfs/fs/federationserverservice.asmx HTTP/1.1\r\nHost: sts1.example.com\r\nConnection: Close\r\n

 

Receive String 200 OK

 

where sts1.example.com is the common name of the cert being presented at the ADFS server and the A record for the VS on the BigIP. With that configured, the VS shows the child pool members are unreachable. Has anyone else seen this?

 

Thinking more about it, it was recommended that we do SSL tunneling so the SSL connection is being terminated on the ADFS server. How would this work with multiple AD FS farm servers? Would each farm server then have to share the same cert and keypair since the common name would have to remain the same?

 

Thanks in advance.

 

-GR