For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jpersin_288375's avatar
jpersin_288375
Icon for Nimbostratus rankNimbostratus
Nov 17, 2017

Redirect office 365 from virtual server direct to internet

Hi All,   I have one virtual server and all traffic will come to it. Then I will direct traffic to pool behind that virtual server which consist of two BlueCoat proxy devices. All traffic except f...
application delivery
cloud
iRules
LTM
jpersin_288375's avatar
jpersin_288375
Icon for Nimbostratus rankNimbostratus
Nov 21, 2017

Hello:

Here is datagroup config:

ltm data-group internal Office_redirect_string {
    records {
        \*.24ur.com { }
        \*.microsoft.com { }
        \*.onedrive.\* { }
        \*.onedrive.live.com { }
        www.avto.net { }
        www.najdi.si {
            data www.najdi.si
        }
        www.pristavec.si { }
        www.rtvslo.si {
            data www.rtvslo.si
        }
        www.smart-com.si { }
        www.telprom.si {
            data www.telprom.si
        }
    }
    type string
}

I think that redirect traffic goes to gw but why Web page doesn't open.

Lee_Sutcliffe's avatar
Lee_Sutcliffe
Icon for Nacreous rankNacreous
Nov 21, 2017

The forwarding probably isn't working as you've defined a pool member to 'forward' to. F5 by default will translate destination IP address to that of the pool members. You'll probably find your firewall is dropping traffic.

To get round this you have two options, disable address translation:

when HTTP_REQUEST {
    if {[class match [string tolower [HTTP::host]] contains o365_list]} { 
        translate address disable
        node default_gw
    } else {
        pool Pool_BC
    }
}

Or.. if your default gateway for your F5 device points out towards your firewall (and therefore internet) you can just use the 

forward
command. This bypasses load balancing and disables address translation 

when HTTP_REQUEST {
    if {[class match [string tolower [HTTP::host]] contains o365_list]} { 
        forward
    } else {
        pool Pool_BC
    }
}