Exchange 2010 Deployment Guide and ActiveSync

Hello Hamish-

I believe you have helped us identify a problem in our documentation. Thank you for that and I'm sorry it's caused you problems. We're working to get this straightened out now. On first glance it looks like we have some legacy information in the guide; I don't believe it's ever correct to use the _sys_APM_activesync iRule; that's there for backwards support of configurations migrated forward from 10.x. I will gt confirmation of this for you one way or another, though.

In the meantime, could you do me a favor and use the 1.2 version of the iApp to set up a parallel deployment so you can compare configurations and functionality?

https://downloads.f5.com/esd/serveDownload.jsp?path=/big-ip/big-ip_v11.x/11.2.1/english/iapp-templates/&sw=BIG-IP&pro=big-ip_v11.x&ver=11.2.1&container=iApp-Templates&file=iapps-1.0.0.61.0.zip

You'll have to choose a new IP address for the virtual server (or, better, temporarily move your other one), but otherwise should be able to point to the same CAS servers, reuse the same cert and key, etc.

You'll discover that, in your configuration, we assign _sys_APM_ExchangeSupport_OA_BasicAuth (a misleading name; it supports all the services) as the supporting iRule, and don't use the _sys_APM_activesync one at all. (There's one case when we do, but it doesn't apply to your configuration and I think we're going to change that anyway, based on your feedback). We do actually mention on page 79 of the guide that the "ExchangeSupport" iRule is required whether or not you're deploying OutlookAnywhere, but that's far from obvious.

We're going to do a complete audit of our manual configuration tables to make sure they match the tested-to-work-correctly configuration of the iApp. That might take a week or so to test correctly in all the possible configurations (Exchange is complex, as you know), so I definitely think you should use the iApp for the moment.