For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Geoff_Littlewoo's avatar
Geoff_Littlewoo
Icon for Nimbostratus rankNimbostratus
Jun 30, 2008

SSL re-direction for Exchange 2003

Using BIG-IP 1500 to manage traffic through to an Exchange 2003 server. It is https traffic with an SSL certificate held on the F5 device. If i create a VS to the Exchange server using http, the stand...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 30, 2008
It sounds like the request is making it to the HTTPS VIP and is being redirected to the new URI. If you make a request to https://domain/exchange do you see the request leave LTM and make it to the web server? Does the reply get back to LTM and then the client? You can check this using tcpdump. If not, is the web server's default gateway set to the LTM's floating self IP on that VLAN? Or do you have SNAT enabled on the VIP?

 

 

Here is a tcpdump command you can use to see the client and server side packets:

 

 

tcpdump -ni 0.0 -s0 host CLIENT_IP or host SERVER_IP

 

 

Replace CLIENT_IP and SERVER_IP with the relevant IP addresses.

 

 

Aaron