For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kaloyan's avatar
Kaloyan
Icon for Cirrus rankCirrus
Jun 12, 2020

APM VIP with exchange servers and NTLM authentication

I used the exchange 2016 iApp ( latest version) to setup one VIP with all services behind it. The problem is that /mapi* should be with NTLM authentication, but rest of it like /owa is using basic a...
application delivery
BIG-IP Access Policy Manager (APM)
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jun 12, 2020

Hello Kaloyan,

 

Did you use an Exchange profile?

Because you can easly set frontend Authentification and SSO by URL/Service:

 

 

 

Regards

 

 

  • Kaloyan's avatar
    Kaloyan
    Icon for Cirrus rankCirrus
    Jun 12, 2020

    Hi youssef,

    yes, I have exchange profile.

    Can I borrow one of the predefined Service Settings and add /mapi* instead of /ews* for example ?

    And probably will need to add SSO Configuration with Kerberos for NTLM ?

    Should I change the policy as well with some NTLM checks ?

    Do I need this ECA enabled on the VIP ?

    So many questions :)