Forum Discussion

alexmetal_3479's avatar
alexmetal_3479
Icon for Nimbostratus rankNimbostratus
Feb 13, 2012

Outlook Anywhere and ActiveSync monitors showing down

Hello,

 

 

We're configuring our LTM to load balance our Exchange 2010 environment. Everything on the template is working so far, except the pools for Outlook Anywhere and ActiveSync are showing as down. I can access the virtual directories just fine in a browser. I've followed the deployment guide precisely and even blown out and re-did the steps. I've verified the username/password are working. Not sure where to go from here! I could use just a basic HTTP GET / monitor, but I'd really like to monitor those virtual directories specifically.

 

 

 

Using version 10.2.2

 

 

 

Thanks in advance!

 

-Alex

 

  • Looks lke the problem may be with the authentication method. The F5 software uses basic authentication to establish the connection. Since many organizations use NTLM with OA, this results in the monitor not passing authentication despite having the correct credentials. I found 2 options that worked.

     

     

    1. Change the response string from "200 Success" to "Unauthorized"

     

    2. (Lass favorable to many) Change your OA accepted authentication method from NTLM to Basic.

     

     

    I hope this helps someone out there avoid some frustration!
  • Hi. I just authored a tech tip on how I built Exchange 2010 monitors. I used some of the info in this thread in my research during development, so I thought I'd pay it forward.

     

     

    https://devcentral.f5.com/Tutorials/TechTips/tabid/63/articleType/ArticleView/articleId/1090542/Health-Monitors-for-Exchange-2010.aspx
  • Nice work SMP! That's really helpful info.

     

     

    With the addition of NTLM support for HTTP/S monitors in 11.1 you should be able to use an inbuilt monitor for the Outlook Anywhere monitor.

     

     

    Aaron
  • Aaron - is there documentation on how to build an HTTP/S monitor supporting NTLM for Outlook Anywhere? I'm having the exact symptoms in this thread using the latest iApp on 11.2. I've tried making my own HTTP/S monitor as you suggest, but it has the same problem. I can log into the CAS servers directly using OA with the monitoring account, or through the F5s to the CAS servers using the monitor account if the F5 is configured to use basic health monitors, but as soon as I set Advanced monitors OA breaks while the rest of the monitors are fine.