For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dan_Wiltshire_2's avatar
Dan_Wiltshire_2
Icon for Nimbostratus rankNimbostratus
May 29, 2013

MS Lync 2013 Reverse Proxy rules

Hi All   Firstly apologies that this post is so long! We have recently rolled out Lync 2013 and are using the BigIP LTM to load balance the web traffic from the reverse proxy server (TMG) to the f...
microsoft
partner
Dan_Wiltshire_2's avatar
Dan_Wiltshire_2
Icon for Nimbostratus rankNimbostratus
May 30, 2013

We get the following in the TMG log when connecting to the BigIP VIP:

 

Failed Connection Attempt

 

Log type: Web Proxy (Reverse)

 

Status: 0x80090322

 

Rule: Lync Proxy URLs

 

Source: Internal (X.X.X.X:31286)

 

Destination: Local Host (X.X.X.X:4443)

 

Request: POST http://extwebsvc01.XXXXX.com/groupe...ket_Bearer

 

Filter information: Req ID: 1532ad2e; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes

 

Protocol: https

 

User: anonymous

 

When connected directly to a single front end, it is the same message but status is 200 OK instead of the error code above.

 

That error code seems to indicate something to do with certificates. On the bigIP we have our public wildcard certificate set up as the serverside certificate and a copy of the front end certificate (which includes the SANS for meet, dialin etc) as the clientside certificate.

 

Dan