When offloading SSL for EWS, follow the recommendations set by Microsoft. Progress Kemp understands the recommendations to be; Enable or Disable SSL on the EWS Virtual Directory: http://technet.microsoft.com/en-us/library/ee633481.aspx.

  1. In the main menu of the LoadMaster WUI, select Virtual Services.
  2. Select Add New.

  3. Enter a valid Virtual Address.
  4. Enter 443 as the Port.
  5. Enter a recognizable Service Name, for example Exchange 2010 EWS.
  6. Select tcp as the Protocol.
    Note: The combination of Virtual Address, Port and Protocol must be unique within the LoadMaster.
  7. Click Add this Virtual Service.
  8. Configure the settings as shown in the following table:

    Optional: Import the appropriate PFX certificate and key file into the LoadMaster. For instructions on how to do this, refer to the Importing and Assigning an SSL Certificate section.

    Optional: You can export the appropriate certificate and key from Exchange 2010 using the Microsoft export information found at http://technet.microsoft.com/en-us/library/bb310778.aspx. Ensure to export the certificate and private key as a Personal Information File (PFX). You can also obtain an SSL certificate that you desire from any certificate authority. When prompted by a third party certificate authority to specify a server type, indicate “Apache”. The format of Apache server type certificates is recognized by LoadMaster.

    * By default, a self-signed certificate is used. Click OK when a message displays indicating that there is no SSL certificate currently available.

    Section

    Option

    Value

    		 Comment
    SSL Properties SSL Acceleration Enabled*
    Standard Options Transparency Disabled

    		Persistence Mode Super HTTP
    Persistence Timeout 1 Hour
    Scheduling Method round robin

    		Idle Connection Timeout 900 Click Set Idle Timeout.

    Advanced Properties

    		 Add Header to Request FRONT-END-HTTP:ON Click Set Header.
    Redirection URL https://%h%s Click Add HTTP Redirector. This creates a redirect Virtual Service on port 80 with the same IP address.

    Real Servers

    		Real Server Check Method HTTP Protocol
    URL /ews/exchange.asmx Click Set URL.
    Click Show Headers. FRONT-END-HTTP:ON Click Set Header. Header injection is a legacy option and is not required as per Microsoft.
  9. Click the Add New… button.

  10. Enter the Real Server Address.
  11. Enter 80 as the Port.
  12. Click Add This Real Server.
  13. Click OK in response to the confirmation that the Real Server was added.

To view, modify, or delete any Virtual Services or Real Servers, select Virtual Services > View/Modify Services from the main menu of the LoadMaster WUI.

The HTTP redirect Virtual Service needs to be configured. Refer to the Creating the Virtual Service for the RPC CA (MAPI) & Address Book Service section for instructions on how to do this.