For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joe_41441's avatar
Joe_41441
Icon for Nimbostratus rankNimbostratus
Mar 08, 2015

http URI filtering in front of TMG

Hello,   I am familiar with the concept of deploying Microsoft TMG behind F5 LTM with forward proxy/reverse proxy. In that scenario I would use an iApp and follow the relevant deployment guides. ...
application delivery
deployment
design
devops
iApps
iRules
LTM
nitass_89166's avatar
nitass_89166
Icon for Noctilucent rankNoctilucent
Mar 08, 2015

I believe I have the iRule setup properly, however the browser just hangs as soon as an http profile is added to the TMG Gateway VS. It hangs without the iRule resource.

i never used tmg but you are talking about tmg as a reverse proxy, aren't you? if yes, can you post the virtual server and pool configurations?

 tmsh list ltm virtual (virtual server name)
 tmsh list ltm pool (pool name)
Joe_41441's avatar
Joe_41441
Icon for Nimbostratus rankNimbostratus
Mar 09, 2015
nitass, the VS and Pool configs are rather vanilla. Sanitized output below: ltm virtual VS_TMG { destination A.A.51.94:any ip-protocol tcp mask 255.255.255.255 persist { source_addr { default yes } } pool VS_TMG profiles { tcp { } } source 0.0.0.0/0 source-address-translation { pool snat-120 type snat } translate-port disabled vs-index 3 } ltm pool POOL_TMG { load-balancing-mode least-connections-member members { TMG:any { address A.A.20.94 } } }