Redirect office 365 from virtual server direct to internet

Please update your datagroup so it looks like this, Microsoft requests were not going into the 'if' condition as datagroups do not parse wildcard characters (*).

ltm data-group internal Office_redirect_string {
    records {
        24ur.com { }
        microsoft.com { }
        onedrive { }
        avto.net { }
        najdi.si { }
        pristavec.si { }
        rtvslo.si { }
        smart-com.si { }
        telprom.si { }
    }
    type string
}

Ok, thanks, but I don't now why sites which are redirected are not open in client. Other pages which goes to proxy works but other which are in data group not works.

The forwarding probably isn't working as you've defined a pool member to 'forward' to. F5 by default will translate destination IP address to that of the pool members. You'll probably find your firewall is dropping traffic.

To get round this you have two options, disable address translation:

when HTTP_REQUEST {
    if {[class match [string tolower [HTTP::host]] contains o365_list]} { 
        translate address disable
        node default_gw
    } else {
        pool Pool_BC
    }
}

Or.. if your default gateway for your F5 device points out towards your firewall (and therefore internet) you can just use the

forward

when HTTP_REQUEST {
    if {[class match [string tolower [HTTP::host]] contains o365_list]} { 
        forward
    } else {
        pool Pool_BC
    }
}

Hello.

I try this solution and doesn't work. VS and nodes are in the same network. I see in ltm log that traffic goes to datagrup list. I try forward and translate address feature.

Is the VS that this iRule is applied to on the same network as

node default_gw

If so have you configured SNAT on your VS?

Yes in the same network. Source address translation is set to "none"

You will likely need to configure SNAT, please select Auto-SNAT

I try with this option and result is the same.

You're going to have to do some basic troubleshooting to find out the cause of the fault.

A few pointers:

• Run a tcpdump on your LTM
• Monitor the firewall to see if the traffic is arriving as expected
• Is any traffic being blocked?
• Do you have any routing issues?
• Do you have any NAT issues on your firewall?

Ok I will do this. Thanks for now. I will update post with my findings.