For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aviv's avatar
Aviv
Icon for Cirrus rankCirrus
Sep 18, 2016

Exchange EWS hybrid Office 365

Hi Experts!

Office 365 try connecting my exchange2010 ews service. i have deployed bigip ver 12 hf2 with iapp 1.6 for exchange. when i try to surf into https://myexchange.com/EWS/mrsproxy.svc i get: HTTP/1.1 401 Unauthorized WWW-Authenticate: Basic realm="myexchange.com" Set-Cookie: MRHSession=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/ Connection: close Content-Length: 0

but i need it to give this output:

HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM X-Powered-By: ASP.NET Date: Sun, 18 Sep 2016 21:11:48 GMT Content-Length: 0 Proxy-Support: Session-Based-Authentication

i tried to add stream profile and this irule but is not working

when HTTP_REQUEST {

STREAM::disable

}

when HTTP_RESPONSE {

  STREAM::expression {@Ntlm@Basic@ @Negotiate@Basic@}
  log local0. " stream worked"

  STREAM::enable

}

How can i replace WWW-Authenticate: Basic realm="myexchange.com" with WWW-Authenticate: Negotiate ,or what i have to do that ews will work with negotiate auth?

Thanks,

Aviv Hassidim

5 Replies

  • If you're using APM, that's configurable through the Exchange APM Profile.

     

    Go to Access Policy > Application Access > Microsoft Exchange.

     

    Edit the profile associated with the VIP and modify the Exchange Web Service front end authentication to use NTLM

     

  • Hi Aviv,

     

    Have you ever resolved this issue?

     

    Kind regards

     

    Sadik

     

    • Aviv's avatar
      Aviv
      Icon for Cirrus rankCirrus

      No i did not resolve the issue. i created a new vs without apm and redirect (nat by firewall)all office 365 traffic to the new vs.

       

      if u will find a better solution tell here.

       

    • Aviv's avatar
      Aviv
      Icon for Cirrus rankCirrus

      No i did not resolve the issue. i created a new vs without apm and redirect (nat by firewall)all office 365 traffic to the new vs.

       

      if u will find a better solution tell here.