You have to do SSL termination at the NetScaler. After that you can choose whether to re-encrypt or not. Exchange doesn’t care, but you must ensure to encrypt with the proper certificate.
From: [email protected] [mailto:[email protected]] On Behalf Of Todd Lemmiksoo Sent: Monday, August 11, 2014 5:07 PM To: [email protected] Subject: Re: [Exchange] Load Balance Exchange 2010 with Netscaler I knew you had miss typed. Our Netscaler guy followed a doc that Citrix had sent for load balancing Exchange 2010. The Citrix tech we had on the phone was not Level 2. Can part of the problem be that we are not doing SSL off load. On Mon, Aug 11, 2014 at 1:32 PM, Michael B. Smith <[email protected]<mailto:[email protected]>> wrote: AHAHAHAHAHAHAHA Yes, I was working on an ASA earlier today. My bad. ☺ From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Damien Solodow Sent: Monday, August 11, 2014 2:28 PM To: [email protected]<mailto:[email protected]> Subject: RE: [Exchange] Load Balance Exchange 2010 with Netscaler Cisco = Citrix in this case I think. ;) DAMIEN SOLODOW Systems Engineer 317.447.6033<tel:317.447.6033> (office) 317.447.6014<tel:317.447.6014> (fax) HARRISON COLLEGE From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Michael B. Smith Sent: Monday, August 11, 2014 2:15 PM To: [email protected]<mailto:[email protected]> Subject: RE: [Exchange] Load Balance Exchange 2010 with Netscaler There are precise examples of netscaler configs on the Cisco website, at least there were earlier this year. I argued and argued with one client’s network guy until I finally got his boss to say “just do it”. And then it worked. ☺ From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Todd Lemmiksoo Sent: Monday, August 11, 2014 1:44 PM To: [email protected]<mailto:[email protected]> Subject: Re: [Exchange] Load Balance Exchange 2010 with Netscaler Sorry for the late reply, management wanted the change backed out. I was not able to get the session timeout info from the guy that did the Netscaler configuration. We are not doing SSL off load on the Netscaler but do have the brgeneral.org<http://brgeneral.org> certificates installed. On Mon, Aug 11, 2014 at 10:19 AM, Michael B. Smith <[email protected]<mailto:[email protected]>> wrote: What’s the session timeout set to? From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] On Behalf Of Todd Lemmiksoo Sent: Monday, August 11, 2014 11:00 AM To: [email protected]<mailto:[email protected]> Subject: [Exchange] Load Balance Exchange 2010 with Netscaler We switched over to the Netscaler load balancer for Exchange this weekend. Testing went OK on sunday. Today network users are having a connection issue using Oulook 2010. Not all users, just some. Some Outlooks fix them selfs are a period of time while others get prompted for user name and password, which times out. Has any one had this issue in the past. As Google is not helpful. We have Citrix Netscaler on the phone right now. But disabling one of the CAS servers seems to not have an effect. When I do a Get-ClientAccessArray i see the CN points to "Exchange Administrative Group" instead of " Default-First-Site-Name". Can this be a cause? I had decomm'd the old Exchange 2007 CAS along time ago. -- T. Todd Lemmiksoo -- T. Todd Lemmiksoo -- T. Todd Lemmiksoo
