Forum Discussion

CGPearson_37419's avatar
CGPearson_37419
Icon for Nimbostratus rankNimbostratus
Mar 05, 2019

Client Certificate Authentication - Exchange 2016 iApp

I have the Exchange 2016 iApp setup and working. I want to configure client certificate authentication for OWA/ECP/ActiveSync, and possibly OA in the future. Has anyone successfully accomplished this within the iApp, or do I need to consider doing a generic SSL passthrough profile of some kind?

 

BIG-IP
client certificate
exchange
iApps
security
ssl
  • KeesvandenBos's avatar
    KeesvandenBos
    Icon for MVP rankMVP
    Mar 11, 2019

    I would build a simple virtual server on port 443 with source address persist and no SSL off and onloading (So SSL bridging, no ssl profiles and no http profile)

     

    You could use a performance layer 4 virtual server for this.

     

    Cheers,

     

    Kees

     

  • CGPearson_37419's avatar
    CGPearson_37419
    Icon for Nimbostratus rankNimbostratus
    Mar 11, 2019

    Just LTM is all we have. The Exchange server will need to do the client certificate authentication.

     

  • KeesvandenBos's avatar
    KeesvandenBos
    Icon for MVP rankMVP
    Mar 10, 2019

    Do you use both LTM and APM or LTM only?

     

    And should your exchange server perform the client cert authentication or the BIG-IP?

     

    Cheers,

     

    Kees