Hi:

I'm wondering if anyone would like to share their words of wisdom of using SSL 
Offloading with Exchange 2007 and 2010 using a "cisco content switch nlb 
device".


Our current configuration is two exchange 2007 cas/hubs with 
legacyname.domain.ca and two exchange 2010 cas/hubs with the 
primaryname.domain.ca.  Using IP stickiness everything appears to work 
properly, redirection works.

However...we've had to enable SSL offloading on the cisco side to implement a 
SSO from a web application. Now we're using https to the content switch, and 
http:// to the cas/hub servers (on the 2010 side only).  We're doing a cookie 
insert on traffic from the application, and if the traffic is outlook anywhere, 
it is in theory supposed to use ip stickiness.  When I go to test this...Office 
2010 appears to be able to connect via outlook anywhere , but outlook 2007 and 
2003 prompt for a password.  SSO works , OWA works, client access array works, 
but outlook anywhere doesn't appear to work.  We're currently testing with a 
wildcard certificate. *.domain.ca .    The wildcard cert worked before enabling 
the SSL offloading, so at this point I'm not sure if this is a configuration 
issue on the content switch or a certificate issue?

Thoughts?

Thanks

Kevin

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Reply via email to