Forum Discussion

Adam_Miceli_144's avatar
Adam_Miceli_144
Icon for Nimbostratus rankNimbostratus
Jan 28, 2013

F5 detects TMG servers down

Hi,   We are trying to publish Exchange 2010 using MSFT Threat Management Gateway (TMG). The TMG servers sit behind a pair of F5 BIG-IPs running 10.x. We have completed all the steps outlined in t...
microsoft
partner
Adam_Miceli_144's avatar
Adam_Miceli_144
Icon for Nimbostratus rankNimbostratus
Jan 28, 2013

Hi Steve,

 

For troubleshooting purposes, we dummied down the monitors, so they are just doing basic TCP 80 port checking. But, telnet tests on port 80 from the F5 to TMG are failing, and that is when we see the "The policy rules do not allow the user request" in the TMG logs.

 

Initially, with OWA for example, we were using the recommended monitor from the F5 deployment guide:

 

GET /owa/auth/logon.aspx?url=https://mail.example.com/owa/&reason=0 HTTP/1.1\r\nUser-Agent: Mozilla/4.0\r\nHost: mail.example.com\r\n\r\n

 

Adam