Microsoft KB Archive/283195

From BetaArchive Wiki
Knowledge Base


XWEB: Passing 'FRONT-END-HTTPS: on' Custom Header from F5 Networks SSL Gateway to the Front-End Server Does Not Enable an SSL Session in OWA

Article ID: 283195

Article Last Modified on 2/21/2007



APPLIES TO

  • Microsoft Exchange 2000 Server Standard Edition



This article was previously published under Q283195


SYMPTOMS

When you use F5 Networks Big-IP to support a hosted commercial e-mail service that runs Microsoft Outlook Web Access (OWA) over Secure Sockets Layer (SSL), the SSL gateway (F5 Networks Big-IP) may stop the SSL session between OWA and the F5 Networks computer. Communications between the F5 Networks computer and the front-end servers work correctly.

When SSL is used with F5 Networks Big-IP, F5 Networks Big-IP passes the following custom header to the front-end servers:

FRONT-END-HTTPS: on


However, this procedure does not work with OWA. The back-end server generates "http://%22 Uniform Resource Locators (URLs) to OWA instead of "https://%22.

CAUSE

This problem occurs because F5 Networks Big-IP passes the custom header "FRONT-END-HTTPS: on" to the front-end servers. The front-end servers generate an additional "FRONT-END-HTTPS: on" header; therefore, the front-end server passes "FRONT-END-HTTPS: on,on" to the back-end server. The back-end server cannot process this header, which results in the generation of "http://%22 URLs to OWA.

RESOLUTION

To resolve this problem, obtain the latest service pack for Microsoft Exchange 2000 Server. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack


The English version of this fix should have the following file attributes or later:

Component: HTTP-DAV

File name Version
Exprox.dll 6.0.4418.48


NOTE: To fix this problem, you must be using F5 Networks Big-IP version 3.3.1 or later. This fix needs to be applied to all of the front-end servers.


STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 1.


Additional query words: BIG IP, Hosting

Keywords: kbbug kbfix kbqfe KB283195