Forum Discussion
Jaymz_mynes_653
Nimbostratus
May 08, 2007Exchange 2007 CAS
has anyone attempted using F5s docs on how to configure Exchange 2007 CAS servers with the BigIP LTM v9.1.1? Their guide seems like it would work, but I think it is missing something...the exchange 2007 bigip config guide makes reference to SSL offloading documents for exchange 2003. this is what has confused me about setting up everything...
14 Replies
- Tech_Imp_40243Historic F5 AccountWhich guides are you looking at? The latest are at:
http://www.f5.com/solutions/deployment/exchange-2007_f5_dg.html
(just making sure we are on the same page)
The SSL offload feature is very nice in that it moves the SSL decryption off your servers and onto the BigIP. It means that you only have one certificate to manage on the BigIP vs. all your mailservers -- giving you about 30% load savings. You can start your deployemnt without the SSL offload and then add it in. I often focus on the basic traffic management part first and then start taking advantage of BigIPs features second.
- James - Jaymz_mynes_653
Nimbostratus
that is the same guide i am using to do my config...if you look at page 1 - 2...you will find a link making reference to SSL offloading for exchange 2000 and 2003. does that imply the same settings for ssl offloading work for exchange 2007? - Tech_Imp_40243Historic F5 AccountYes
The reference is this:
Instructions for configuring SSL offloading for Microsoft Exchange
Server 2003 and 2000 can be found in the following Microsoft
Knowledge base article:
http://support.microsoft.com/kb/327800/en-us.
The intent was to help point folks to the KB article on how to set this up on 2000 and 2003. Things changed in 2007 as far as SSL offload goes.
Hope that helps clear things up. - Jaymz_mynes_653
Nimbostratus
It sort of made things clear...however i still do not know how to properly setup SSL offload for exchange 2007 OWA. It is easy to find for outlook anywhere, active sync, etc (as it is in the management console), but its not that clear when it comes to OWA. - Tech_Imp_40243Historic F5 AccountTake a look at this section:
http://www.f5.com/solutions/deployment/exchange-2007_f5_dg.html1060095
There are several steps but the end result is that you can have SSL offload and if the customer enters in http://mail.company.org it will automatically redirect it to https://mail.company.org for OWA access. - Jaymz_mynes_653
Nimbostratus
just for grins i decided to try and add the registry entry to the 2007 CAS server for SSL offloading and it worked... microsoft did not make this very clear in their instructions, but hopefully others will see this and not have to waste as much time as i did to get this to work. - Tech_Imp_40243Historic F5 AccountGood to hear! ... I'm very much not into having folks spin their wheels and maybe we need to tune up the guides a bit
So I'm clear (I was headded the wrong direction earlier) you put this change in effect:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeWEB\OWA
Value name: SSLOffloaded
Value type: DWORD
Data value: 1
On a 2007 Exchange server and all was well with the world?
- James - Tech_Imp_40243Historic F5 AccountGood to hear! ... I'm very much not into having folks spin their wheels and maybe we need to tune up the guides a bit
So I'm clear (I was headded the wrong direction earlier) you put this change in effect:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSExchangeWEB\OWA
Value name: SSLOffloaded
Value type: DWORD
Data value: 1
On a 2007 Exchange server and all was well with the world?
- James - Jaymz_mynes_653
Nimbostratus
As weird as it is...yes, that is the setting i put on the CAS server to make it work. I even doubled checked to make sure there was not another change i made that would inadvertantly make this work. - steve_88008
Nimbostratus
mynes4 - I realize this is a bit old, but am wondering what other compents of exchange 2007 you decided to use LTM for?
example might be hub or edge. I am getting ready for this migration myself and just wonder if there are any advantages or disadvangtes you may have found with LTM and EXcahnge 2007.
Thanks,
Steve
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
