For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

David_Glasgow_1's avatar
David_Glasgow_1
Icon for Nimbostratus rankNimbostratus
Nov 10, 2016

Publishing Exchange with a single IP

Hi All   We wish to publish our exchange services behind a single virtual server. However in order to complete meet our internal policies we need to have 2 factor authentication applied.   Whe...
application delivery
BIG-IP Access Policy Manager (APM)
Leonardo_Accors's avatar
Leonardo_Accors
Icon for Cirrus rankCirrus
Nov 11, 2016

Hi David, the better way I see to do what you require is using a two level VS. You have to make a first VS with the ip of the service. Attached to this VS you have to setup a policy in whitch you have to setup this rules:

 

http-uri all starts-with /microsoft-server-activesync -> forward request to VS1 in any other case -> forward request to VS2

 

then you: create VS1 (with a fake ip like 1.1.1.1) and setup this VS without apm policy create VS2 (with a fake ip like 1.1.1.2) and setup this VS with apm policy

 

So you make a "chain" that permit you to select the VS according to the uri requested by the client. Sorry for my terrible english, I hope it's clear.

 

regards

 

Leonardo