F5 UAG SharePoint 2010 (NO DIRECT ACCESS)

Issues over here :-(

 

using this config:

 

UAG VIP (default "cookie" persistence profile) => 2 UAG Servers => VIP SPS (Default "Cookie" persistence profile) => 2 SPS servers.

 

 

SharePoint is using a Claims based authentication (AD + FBA) and we are using a custom UAg dev to log external users using the AD authentication provider. The Custom dev uses the UAG 401 authentication method and sends the credentials on behaf of the user to the sharepoint site.

 

The issue is: we are having a random error:

 

 

The request from user domain\\user at source IP address (internal BigIP IP address) to trunk xxx;

 

Secure=1 failed because the request was unable to reply to an HTTP 401 request from application XXX of type SharePoint14AAM.

 

 

 

If we take one of the UAG servers offline the error is less frequent.

 

I switched to "source_addr" persistence profile and we still see this error.

 

 

i will create a custom "cookie' profile as Ryan stated in one of his replies.

 

Any suggestions are welcome.