Forum Discussion

ryanm99's avatar
ryanm99
Icon for Nimbostratus rankNimbostratus
Feb 01, 2018

Exchange 2016 - F5 APM Mapi Issue

Hello Everyone,

 

I am in the process of deploying F5 APM in front of Exchange 2016 for users entering the environment from the internet. I have been following the Exchange 2016 deployment guide found here:

 

https://f5.com/solutions/deployment-guides/microsoft-exchange-server-2016-big-ip-v11-v12-ltm-apm-afm

 

I am not using the iApp as our configuration is more complex than the iApp handles without modification so I have opted to configure things manually. I have gotten to a point where everything is working with the exception of mapi over http. I am running version 13.1 of APM so mapi over http should be supported without issues. Whenever I launch outlook, I asked to enter credentials. After I enter credentials, it just asks again so I know I am having an authentication failure, but I am not quite sure what the cause is.

 

Within my exchange profile, I have outlook anywhere front end auth set to basic and the sso configuration is blank. This is the same configuration setting that the iApp generates if I use that. This APM forwards traffic to an LTM that sits within our network. One the exchange side outlook anywhere is set to use basic authentication.

 

Anyone have any ideas on what I could be missing?

 

4 Replies

  • Does anyone have a working MAPI over HTTP configuration going through APM that I could compare settings with?

     

  • What fixed it for us was we needed to enable basic authentication on the mapi virtual directory for our exchange servers in ECP. Only NTLM and Negotiate were enabled. Once that change was made, outlook took right off.

     

    • Hank_Moody_3649's avatar
      Hank_Moody_3649
      Icon for Nimbostratus rankNimbostratus

      We have NTLM/Negotiate right now. So I have to change it to Basic? Do I have to make SSO Profile changes on LTM, and configure Connectivity Profile for Exchange where I have to set Outlook Anywhere to Basic? And maybe add /mapi* wehre right now only /rpc/rpcproxy.dll exists?

       

  • efouli's avatar
    efouli
    Icon for Nimbostratus rankNimbostratus

    ,That`s what exactly i have done to get it works, enable Basic on the Virtual Directory of mapi and ews.