Forum Discussion

RainHail_281362's avatar
RainHail_281362
Icon for Altostratus rankAltostratus
Oct 28, 2016

Exchange 2013 iApp Confguration for MobileIron

I've deployed the iApp for Exchange 2013 using the defaults except for using SSL Bridging instead of SSL Offloading. All internal and external mail flows just fine, but mobile devices configured wi...
application delivery
exchange 2013
iapp
iApps
LTM
mobileiron
  • RainHail_281362's avatar
    RainHail_281362
    Nov 03, 2016

    We resolved this. We had the ActiveSync virtual directory in IIS locked down to the MobileIron servers, but needed to add the self-ip's of the F5 devices as well.

     

mikeshimkus_111's avatar
mikeshimkus_111
Historic F5 Account

Hi RainHail, You can't change the iApp virtual server type to Performance L4 because that VS type isn't supported for doing all the things that the iApp deployment needs to do.

 

I'm unfamiliar with how MobileIron works, so I'm just going to ask some general questions.

 

Is MobileIron sitting between mobile clients and your Exchange server? Was the previously configured Performance L4 virtual server the target for traffic sourced from MobileIron, and did it work until you switched it to point at the iApp-created virtual server?

 

Did you deploy APM or AFM with your Exchange iApp?

 

mikeshimkus_111's avatar
mikeshimkus_111
Historic F5 Account
Oct 28, 2016

Do you see successful authentications in APM for the clients when they are forwarded to the iApp VS?

 

Does the MobileIron Sentry have a cert installed? It should either have the cert that matches the one used in the iApp, a self-signed cert, or none at all, according to this: https://www.ndm.net/mobile/pdf/vol_iv_using_mobileiron_sentry.pdf

 

In the old way, if the MobileIron device had a cert with it's own CN, that should work. But it would break if you started pointing that to a VS using the Exchange cert.