Forum Discussion

Mark_Cloutier's avatar
Mark_Cloutier
Icon for Nimbostratus rankNimbostratus
Mar 17, 2015

APM,LTM front ending Internet https access to Exchange and Lync

I have just started the design for this project. Reading the iapp deployment guide for Exchange leads me to believe that the "approved" solution is to have APM accepting connections from users on the Internet and then directly authenticating them against AD. Our policy has always been to not allow any device that accepts connections from the Internet to authenticate those connections directly against AD, we send them thru an Oracle Directory Server (ldaps) which has a copy of the AD info pushed to it by AD. Anyone else out there have experience with this approach?

 

APM
application delivery
design
devops
iApps
LTM
security

2 Replies

Sort By
  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Mar 17, 2015

    Mark,

     

    That's what most customers choose to do - use AD - so the iApp is taylored to that scenario. You can still use it to build out the config and then change the AD authentication part to be LDAPS instead manually - there are a number of customers that do it.

     

  • Mark_Cloutier's avatar
    Mark_Cloutier
    Icon for Nimbostratus rankNimbostratus
    Mar 17, 2015

    Makes sense Mike, thanks. Nice to get some confirmation on my assumptions before I proceed to far down the design path.