Forum Discussion

Amnard's avatar
Amnard
Icon for Nimbostratus rankNimbostratus
Nov 09, 2012

Analytics Profile vs ML Mail Client Compatibility

If you run the Big-IP 11.1.0 HF3, HF4 or HF5 and turn on the Analytics Profile for the Exchange 2010 OA/EWS VS, Apple MountainLion native Mail Client will not be able to connect to the VS.

 

Big-IP 11.1.0 HF2 with enabled Analytics Profile works with Lion and MountainLion mail clients.

 

Big-IP 11.1.0 HF3+ with enabled Analytics Profile only works with Lion mail client, but not MountainLion mail client.

 

Big-IP 11.1.0 HF3+ without Analytics Profile works with Lion and MountainLion mail clients.

 

This doesn't seem to be an isolated client issue since I have discovered another mail client in the Apple store that has the same connectivity issue as the ML mail client.

 

F5 engineer diagnosed the problem as TLSv1 issue which proven to be fault when I reconfigured the VS to use http instead of https and still had the same problem.

 

I am having a hard time convincing that this is a problem with the new Mac mail client. What do you think? I am just checking if anyone else experiencing similar problem.

 

config
design

3 Replies

Sort By
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Nov 09, 2012
    OK. So maybe the analytics module is having issues parsing one of the requests being made. If you've already eliminated TLS, then perform a tcpdump on the client traffic looking for the affected client IP and verify what requests are being made and what's being returned.

     

     

    It's possible that the affected client is doing something slightly weird (Not necessarily non-standard, just unexpected) and that the module can't parse it (Effects would range from connection closing, to hanging, depending on what's wrong).

     

     

    Once you have the conversation in a tcpdump you can have a look with wireshark or similar to pull the data from the tcpstream and see the requests and responses

     

     

    (Hint: Don't post it unless you're using a test environment because the auth usually passes through using browser-basic).

     

     

    H
  • Hamish's avatar
    Hamish
    Icon for Cirrocumulus rankCirrocumulus
    Nov 09, 2012
    Oh. And is it JUST analytics you're enabling/disabling? Or are you adding/removing HTTPProfile as well?

     

     

    H
  • Amnard's avatar
    Amnard
    Icon for Nimbostratus rankNimbostratus
    Nov 09, 2012
    Just enabling/disabling analytics.

     

    When troubleshot the issue with wireshark, the client just closed the connection for no apparent reason.