Setup for UAG proxying Activesync traffic

Yes, if using NTLM authentication, don't use OneConnect as well. Note this applies where a single layer of F5s are used. In your case things may be a bit more 'nuanced' but I'd certainly disable it all round and see if this solves the first issue. If not, put it back.

 

 

Compression is definitely a good idea for any HTTP traffic and will reduce bandwidth usage and improve apparent client performance significantly. I'd recommend it, but implement it only on one set of F5's. I'd say the external ones to prevent any possible issues with the proxies not understanding the compressed content. I typically configure deflate (rather than gzip) and a level of 8.