Forum Discussion

Nimbostratus

Mar 08, 2015

http URI filtering in front of TMG

Hello, I am familiar with the concept of deploying Microsoft TMG behind F5 LTM with forward proxy/reverse proxy. In that scenario I would use an iApp and follow the relevant deployment guides. ...

Employee

Mar 08, 2015

I believe I have the iRule setup properly, however the browser just hangs as soon as an http profile is added to the TMG Gateway VS. It hangs without the iRule resource.

i never used tmg but you are talking about tmg as a reverse proxy, aren't you? if yes, can you post the virtual server and pool configurations?

 tmsh list ltm virtual (virtual server name)
 tmsh list ltm pool (pool name)

Joe_41441
Nimbostratus
Mar 09, 2015
nitass, the VS and Pool configs are rather vanilla. Sanitized output below: ltm virtual VS_TMG { destination A.A.51.94:any ip-protocol tcp mask 255.255.255.255 persist { source_addr { default yes } } pool VS_TMG profiles { tcp { } } source 0.0.0.0/0 source-address-translation { pool snat-120 type snat } translate-port disabled vs-index 3 } ltm pool POOL_TMG { load-balancing-mode least-connections-member members { TMG:any { address A.A.20.94 } } }
nitass
Employee
Mar 09, 2015
configuration looks straightforward. i do not see anything suspicious. have you tried tcpdump when having the problem?