For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dbow_21284's avatar
Dbow_21284
Icon for Nimbostratus rankNimbostratus
May 21, 2009

HTTPS VIP - Redirect to Maintenace Page

Hey everyone,     Fairly new to F5s, used to the GUI stuff (laught all you want)! Anyway, I have a site that is HTTPS only, and I need to redirect to a maintenance page if all the nodes in...
application delivery
dev
devops
iRules
dennypayne's avatar
dennypayne
Icon for Employee rankEmployee
May 21, 2009

Posted By ddenbow on 05/21/2009 12:47 PM

 

The problem is that I cannot offload SSL to the LTM as this is for Exchange 2007 OWA. We have many Active Sync enabled phones and Microsoft does not support Active Sync when offloading SSL from the Exchange 2007 Hub transport (OWA) servers.

 

 

 

You can always re-encrypt using a serverssl profile before the connection is sent to the OWA servers. Then OWA doesn't "know" that there's any offload of SSL taking place. But you have to decrypt at the LTM so that you can manipulate the http data.

 

 

Plus according to SOL 6087 (Click here you need to add a FRONT-END-HTTPS: on header to virtuals that do offloading for OWA, and I'd be surprised if that doesn't indicate to the server what it needs to do that Active Sync properly.

 

 

Denny