APM on 1600 with 10.2.4HF10 and Route Domain not showing Logon Page

We're using a LTM with APM add-on license on a BIG-IP 1600 running 10.2.4HF10. We are also using Route Domains, but without assigning it to dedicated partitions. We have a standard VS running on port 443 with Exchange 2013 behind and accessing it without APM policy assigned works fine. This VS-config is created in Common partition and is part of Route Domain 3.

 

Now we want to add some APM features and first started with just a Logon Page, but as soon as we assign the policy to the VS, connection is broken (resetted from the VS). This is what we see:

 

• first the certificate warning (as we are testing with IP-address), but successful SSL-handshake
• then I see the redirect in the address bar to "/my.policy"
• but then the VS breaks the connection by sending a RST-packet

Right now, we have totally no idea why this happens and how we could further analyze this. Testing on port 80 is currently not possible, as the Internet-FW is only opened for port 443. The access policy is created with default values, so the "Secure Cookie" option is enabled. We also tried to failover the cluster and tried it on the other machine, but same behavior. We also tried a "bigstart restart", but without success. In the VPE we also found the option "Route Domain Selection" and we included it at the beginning with the value of 3 (not sure what this does and if this is really required here), but still same issue.

 

Does anybody has an idea what could be the reason for this or what else we could try? Or do you require and further information? My feeling says this can't be a bug or something like this, but is more related to our setup/configuration.

 

Thank you!!!

 

Ciao Stefan :)