For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jameshendergart's avatar
jameshendergart
Historic F5 Account
Aug 19, 2011

F5 Deployment Guide for Exchange Server 2010 updated - v3.0

Short link to the new guide: http://tinyurl.com/exchdg

 

 

- Substantially updated the configuration for Edge Gateway and APM

 

- Updated manual configuration tables in the appendix

 

- Modified timeout value for RPC Client Access persitence from 3600 to 7200 seconds.

 

- Added Appendix B: Technical Notes with detailed descriptions of Slow Ramp Time, SAN SSL certificates and Outlook Client configuration.

 

- Added updated iRules for persistence

 

 

Get it here: http://www.f5.com/pdf/deployment-gu...010-dg.pdf

 

 

Thanks!

 

James Hendergart

 

Sr Business Development Manager

 

F5 Networks

2 Replies

  • First of all, a big thank you for the continued development of this deployment guide. It serves as an excellent reference.

     

     

    I have a few concerns I'd like to mention.

     

     

    The "Microsoft-Server-ActiveSync" value will never be hit because of the lowercase conversion here:

     

     

     

     

    switch -glob -- [string tolower [HTTP::path]] {

     

    "/Microsoft-Server-ActiveSync" {

     

     

     

     

    Also, why are "/ews*" and "/oab*" in the iRule but no explicit reference to "/owa*"?

     

     

    Finally, my pcaps include many calls to "/autodiscover/autodiscover.xml" which is not in the iRule and none to "/xml/autodiscover.aspx" which is.

     

     

    - Jeli

     

  • mikeshimkus_111's avatar
    mikeshimkus_111
    Historic F5 Account
    hi Jeli, I believe there's no reference to /owa because it should fall through to the default case at the bottom of the rule.

     

     

    About the autodiscover URI and lowercase conversion-we will check the configuration and make adjustments as necessary. Thanks for your input on this.

     

     

    Mike