For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cory_O's avatar
Cory_O
Icon for Cirrus rankCirrus
Jun 25, 2014

Hi Mike-

I converted the logs to Debug for both access and SSO. Unfortunately, I only see the same three messages that I previously mentioned repeating over and over.

Found HTTP 401 response for SSO configuration '/Common/%COMPANY%_NTLMV2' type:'ntlmv2'
metadata len 338
Websso NTLM authentication for user '%USERNAME%' using config '/Common/%COMPANY%_NTLMV2'

On a whim, I tried to use a browser to download the .lzx file directly, and the browser also reported the connection terminating abnormally.

I dumped my hosts file entries from our POC LTM+APM 11.5.1 --> CAS config back to our production LTM 11.2.0 --> TMG --> LTM 11.2.0 --> CAS configuraton, and I was able to download the .lzx file through a browser and through BITS without issue. Both configurations are pointing at the same 10 CAS servers.

This is an odd one! 🙂

-Cory