For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Yann_Desmarest's avatar
Yann_Desmarest
Icon for Cirrus rankCirrus
May 29, 2016

Hi,

 

for the first question, you can define the VS on the internal F5 as standard with default client and server ssl profiles. It will provide you the ability to add cookie persistence. If you set L4 performance, you should not add any ssl profiles and you need to add source_addr persistence that will not help as the source IP will be the external F5 floating self ip. So, I suggest to opt for the standard VS with SSL bridging (clientssl and serverssl) and add a cookie persistence profile

 

for the second question, if you configure 2-factor authentication directly on the VPE, you then need to provide username/password creds only to OWA and make everything works smoothly. You have an IP Subnet Check block on the VPE to help you decide if the user should get an extra 2-factor auth or not.