Microsoft Exchange 2010 and 2013 iApp Template
Problem this snippet solves:
Use the Exchange 2010/2013 template to provide additional security, performance, and availability for Exchange Server 2010 and Exchange Server 2013 Client Access Servers. When configured with the iApp template, the BIG-IP system will perform as a reverse proxy for Exchange CAS servers, and can also perform functions such as load balancing, compression, encryption, caching, and pre-authentication. You can now use BIG-IP Advanced Firewall Manager (AFM) for an additional layer of security.
If you are using Exchange 2016, see the Exchange 2016 page
v1.5.1: fully supported
This version of this iApp template is found on downloads.f5.com in the iApp templates package, and contains the features and fixes found in 1.5.0rc1 and rc2. Use the following link to access the associated Exchange 2010/2013 deployment guide, which includes detailed information on finding and downloading the new iApp template. There were no new features added in this maintenance release.
- The caching and compression profiles and iRule are no longer incorrectly assigned in the separate virtual server deployment scenario.
- Corrected an issue where the default TCP profile idle timeout could reduce battery life in mobile devices that use the ActiveSync protocol
- The iApp now correctly suppress output in external monitors. Previously an unavailable service could have been marked available by the BIG-IP system.
If upgrading to this version of the iApp template from an iApp version prior tov1.2.0, you must carefully review all settings before submitting the template.
For example, if you had configured the original template for SSL bridging, afterupgrading this setting defaults back to SSL offload, and you must change it.
v1.5.0: fully supported
This version of this iApp template is now found on downloads.f5.com in the iApp templates package, and contains the features and fixes found in 1.5.0rc1 and rc2. Use the following link to access the associated Exchange 2010/2013 deployment guide, which includes detailed information on finding and downloading the new iApp template.
F5 Networks has released v1.5.0rc2 of the Exchange template. Version 1.5.0rc2 contains the following changes to version 1.5.0rc1:
- Fixed an issue with errors caused by special characters in the APM delegation account password.
- Updated the persistence iRule(s) to check for the existence of the Authorization header prior to persisting on the header value.
F5 Networks has released v1.5.0rc1 of the Exchange template. Version 1.5.0rc1 contains the following changes to version 1.4.0:
- Added support for the Advanced Firewall Manager (AFM) module.
- Added support for changing account passwords from the OWA logon screen.
- Removed the option to choose a pre-existing direct AAA server object.
- Corrected an issue in the APM configuration where OWA logon options were not always honored.
- Corrected an issue in the APM configuration where a required iRule was not created when deploying in APM-only mode.
F5 Networks has released v1.4.0rc3 of the Exchange template. Version 1.4.0rc3 contains the following changes to version 1.4.0rc2:
- Corrected an issue in the LDAP health monitor user name field if you chose to use BIG-IP APM and chose to create a new LDAP monitor. The correct user name is now included.
- Corrected an issue for Exchange 2013 in the BIG-IP APM forms-based SSO Configuration object, which was trying to use the sessionid cookie. This cookie is present in 2010, but not in 2013. The correct SSO Configuration is now created.
F5 Networks has released v1.4.0rc2 of the Exchange template. Version 1.4.0rc2 contains the following changes to version 1.4.0rc1:
- The option/question for restricting EAC access by IP address or network with BIG-IP LTM is no longer available in 1.4.0rc2, as it did not function reliably. The option to have BIG-IP APM restrict EAC access to members of the Exchange Organization Management Security Group is still available.
- The iApp now contains the configuration for using Exchange 2010 and RPC Client Access. Previously this was a manual workaround in the deployment guide.
- Added support for BIG-IP version 11.6.
F5 Networks has released v1.4.0rc1 of the Exchange template. Introduced in version 1.4.0rc1 are the following features:
- The iApp now includes support for smart card authentication for OWA
- Added the option to recreate the OWA public/private computer and light version choices on the BIG-IP APM logon page Issues Resolved:
- Modified the persistence profile and combined persistence iRule to prevent connection clumping* Disabled Nagle's algorithm on template-created WAN profiles
How to use this snippet:
If the latest release of this iApp template is on downloads.f5.com, use the link below for instructions on how to download and use the template. If the latest release is a release candidate, you can download it directly and import it onto the BIG-IP system.