Forum Discussion

blwavg_10621's avatar
blwavg_10621
Icon for Nimbostratus rankNimbostratus
Nov 11, 2013
Solved

APM Active Session Reduction

Migrated an exchange environment to the F5. The number of APM fronted connections was massive. We quickly ran out of concurrent sessions. We have since implemented a reduction measures such as inacti...
application delivery
BIG-IP Access Policy Manager (APM)
microsoft
performance
security
  • Michael_Koyfman's avatar
    Michael_Koyfman
    Nov 11, 2013

    It sounds like you have implemented all the right checks - setting the proper timeouts is key here.

     

    Regarding creating new session each time a user does manual activeSync - that should not be happening - if it really does, it would help to get a case open with F5 support and supply all the relevant data(debug logs from the APM as well as ssldump of the traffic that shows two separate manual activeSync connections). Also, it would help us to know which platforms/devices do you experience ActiveSync issues on, and what exactly do you classify as "manual" ActiveSync?

     

Michael_Koyfman's avatar
Michael_Koyfman
Icon for Cirrocumulus rankCirrocumulus

It sounds like you have implemented all the right checks - setting the proper timeouts is key here.

 

Regarding creating new session each time a user does manual activeSync - that should not be happening - if it really does, it would help to get a case open with F5 support and supply all the relevant data(debug logs from the APM as well as ssldump of the traffic that shows two separate manual activeSync connections). Also, it would help us to know which platforms/devices do you experience ActiveSync issues on, and what exactly do you classify as "manual" ActiveSync?

 

Michael_Koyfman's avatar
Michael_Koyfman
Icon for Cirrocumulus rankCirrocumulus
Nov 11, 2013
Glad to see that it does not appear to be the case - I've never seen this to be the case. You could have some users that have a ton of unique devices accessing Exchange.... pulling a report on those user ids and analyzing their UserAgent strings would help to find out what is really going on.