For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

TZ_95053's avatar
TZ_95053
Icon for Nimbostratus rankNimbostratus
Mar 17, 2011

Exchange 2010 403 Permission Denied.

I have a two armed configuration on the f5 and configured exchange 2010. My external ip is 10.200.94.5 and internal is 10.200.20.5. When my client try to access external address, I get a permission denied error from the CAS servers. Is this a common issue? How do I fix this?

 

microsoft
partner

4 Replies

  • Helen_Johnson_1's avatar
    Helen_Johnson_1
    Historic F5 Account
    Mar 28, 2011
    Hi TZ,

     

     

    Without more information about your BIG-IP configuration or your network, it's a bit difficult to diagnose what might be happening. If your BIG-IP has an active support contract, I'd suggest opening a case with F5 Support. They can help you troubleshoot and diagnose what might be happening, be it on your BIG-IP, or on your CAS array.

     

     

    Cheers,

     

    Helen
  • TZ_95053's avatar
    TZ_95053
    Icon for Nimbostratus rankNimbostratus
    Apr 06, 2011

    Thanks. I figured it out. It has to do with the SSL offload.

     

     

  • vvskaladhar_488's avatar
    vvskaladhar_488
    Icon for Nimbostratus rankNimbostratus
    Nov 21, 2011
    HI TZ,

     

     

    I have similar problem and i am seeing error 403 forbiden Access denied. Can you please let me know is it mandatory to upload SSL on both server and f5 level ?
  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Nov 21, 2011
    If you setup your configuration on F5 to perforn SSL offload, then you need to configure CAS to work with the SSL offload configuration, and unchecking SSL Required box on /owa portion of the IIS site should do the trick. If you are re-encrypting, you should not be getting this error.