For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

cjfsoares's avatar
cjfsoares
Icon for Nimbostratus rankNimbostratus
Oct 10, 2023

NTLM Authentication

Hi,

I have an iRule to send auth traffic to an IIS server. NTLM. If the traffic is sent without encription no problem, otherwise I get a RST after the first 401. Can any one help me?

Here's the iRule I use (no encription between F5 and IIS)

when HTTP_REQUEST {
NTLM::disable
SSL::disable serverside
set enc "0"

ONECONNECT::detach disable
ONECONNECT::reuse disable
NTLM::enable 
snatpool SN_Pool_VLAN10
if { [HTTP::path] ends_with "/123"} {
HTTP::respond 301 Location "https://[HTTP::host]/123/"
    }
       pool /DR/Pool_with_no_encription
       return
   }
when SERVER_CONNECTED {
SSL::profile PCSSL_serverside_encription
if {$enc equals "1"} {
SSL::enable serverside
} else {SSL::disable serverside
}
}

1 Reply

  • Hi cjfsoares - while I hope someone from the community can give you a quick answer, I've asked colleagues if they can come take a look at your issue and offer their help. Fingers crossed for speedy resolution!