Forum Discussion

Parveez_70209's avatar
Parveez_70209
Icon for Nimbostratus rankNimbostratus
Dec 18, 2018

Exchange VIP for Port 587 ?

We have exchange VIP which is working on Listening VIP 25 which is working as expected.

 

For now, our firewall is still in learning mode,and into the Firewall Logs, a lot of communications are directly going to the backend Exchange application servers over Port 587 bypassing VIP, as we dont have any listening VIP CREATED for Port 587.

 

So, do we need to create one for that , kindly guide. And ofcourse will fine tune the firewall rules to communicate to VIP only, not directly.

 

Kindly suggest.

 

Regards Parveez

 

application delivery
BIG-IP

2 Replies

Sort By
  • Rico's avatar
    Rico
    Icon for Cirrus rankCirrus
    Dec 18, 2018

    Parveez,

     

    If you wish to intercept the traffic, you are going to have to make a vip listening on that port and direct traffic through it. Once you have the vip created, you can either redirect the traffic to the original vip on 25 with an iRule or process the traffic separately in the new vip.

     

    Hope this helps.

     

  • David__Pasch's avatar
    David__Pasch
    Icon for Altostratus rankAltostratus
    Dec 18, 2018

    Yes, you will want to set up a VIP for that. Please note if the it is a secure connection, and then set the VIP up accordingly. A VIP just like the 25 VIP may not work depending on SSL termination.

     

    Good Luck!

     

    David