Load balancing Microsoft IAG

Size: px
Start display at page:

Download "Load balancing Microsoft IAG"

Transcription

1 Load balancing Microsoft IAG Using ZXTM with Microsoft IAG (Intelligent Application Gateway) Server Zeus Technology Limited Zeus Technology UK: +44 (0) The Jeffreys Building 1955 Landings Drive US: Cowley Road Mountain View Cambridge CB4 0WS CA United Kingdom United States Web:

2 Contents Introduction...3 What is ZXTM?...3 ZXTM VA (Virtual Appliance) for Windows...3 Installing ZXTM VA for Windows...4 Running the Initial Configuration Wizard...5 Configure Networking... 5 Completing the wizard... 6 Deployment Architecture...6 Configuring Your ZXTM VA for Windows for IAG Service...7 Manage a new service wizard... 7 Creating a Traffic IP Group... 9 Binding a service to a Traffic IP... 9 Session Persistence...10 SSL Session ID IP Based SSL Decryption/Re-encryption TrafficScript Example RuleBuilder Example Summary...29 Copyright...30 Contact Information D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

3 Introduction This document will show you how to deploy ZXTM with Microsoft Intelligent Application Gateway (IAG) server. The Whale Communications IAG server is a SSL VPN technology which was acquired by Microsoft in July We will discuss using ZXTM to load balance IAG VPN services, to increase the availability and performance of your Microsoft edge services. In this white paper we will assume you are using ZXTM LB Virtual Appliance (VA) for Windows running on the same hardware as the IAG server. However the content is also relevant to customers using other variants of Zeus ZXTM or ZXTM LB software on different platforms, ZXTM or ZXTM LB Appliances, or ZXTM Virtual Appliances. What is ZXTM? ZXTM (Zeus extensible Traffic Manager) is an application load balancer and Traffic Manager. It operates at layer 7 (the application layer) of the OSI stack. ZXTM manages your application traffic, by performing deep packet inspection, and making dynamic routing decisions as it load balances traffic across your application infrastructure. ZXTM also monitors the availability of those applications and ensures that your clients receive the best possible service. ZXTM is fully fault tolerant and will cluster with other ZXTM instances to ensure high availability of your applications even if one of the ZXTM instances should fail. We often think of ZXTM as a toolkit, which, with our powerful TrafficScript language can implement almost any traffic routing logic you could ever require. ZXTM is available as software, as virtual appliances and as dedicated hardware appliances. It also comes in two main variants, full ZXTM, and ZXTM LB. ZXTM LB is the entry level load balancer and is perfectly suited for managing IAG and simple ISA services. For more information on ZXTM, please see the following documents: ZXTM VA (Virtual Appliance) for Windows ZXTM VA for Windows is a Microsoft Virtual Appliance, which has been specially optimised for use with Microsoft Virtual Server. ZXTM VA for Windows also provides a MMC snap-in component to allow configuration of the appliance hardware from within the Windows 2003 host operating system. ZXTM VA for Windows, like all other ZXTM products, is configured for the most part through the Web UI (User Interface). D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 3

4 Installing ZXTM VA for Windows The ZXTM VA for Windows download is available from Value Added Resellers and OEMs of Zeus Technology. For more information contact Zeus Technology at Once you have downloaded the most recent version of the installer you can begin installation by executing the setup.exe application. The setup application will extract the files required by the installer and then launch the Installation process automatically. Follow the on-screen instructions to install ZXTM VA for Windows on to your server. The screenshot above shows the Welcome Screen, after clicking Next on this screen, you will be shown the ZXTM license agreement, which you will need to accept this in order to continue with the installation. You will then be shown a list of pre-requisite software for running ZXTM VA for Windows. At present, the requirements are a fully working installation of Microsoft Virtual Server Next, you need to choose an installation folder for the ZXTM software. 4 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

5 Finally, you will be asked to configure the network interfaces on the ZXTM VA for Windows, and bind them to physical interfaces on your host server. That s the final configuration option. The next screen will start the installation of the ZXTM VA for Windows. Once complete you can access the ZXTM Administration Interface by clicking the application launcher in the Start menu. For more information on installing, configuring and using the Windows version of ZXTM, please refer to the following documents: Running the Initial Configuration Wizard The first time you connect to your newly installed ZXTM, you will be required to run the Initial Configuration Wizard. Configure Networking When you configure networking you will need to assign addresses to the virtual interfaces that you configured during the installation. You will need to ensure that you remember which physical interfaces you have mapped the virtual interfaces to and assign appropriate network addresses to them. The addresses you assign here will be for the ZXTM VA for Windows, we will configure a floating IP later to host the VPN service itself. However the IP you use for the service D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 5

6 needs to be in the same subnet as one of the addresses assigned to the ZXTM VA for Windows. In the configuration shown above, we have assigned /16 to eth0 and /24 to eth1. There are two network interfaces on this Virtual Appliance, but you may only need to use one. The addresses you configure here are to access the ZXTM VA itself. We will configure the HA (high availability) addresses later which will host the IAG service. Completing the wizard Follow the on-screen instructions to complete the Initial Configuration Wizard. You will be required to configure your DNS settings, Date and time zone, admin user password, and upload a valid ZXTM license. When complete, your ZXTM VA for Windows will be restarted. Click the link to access the new administration server. Deployment Architecture The ZXTM VA for Windows and IAG server will be running on the same physical hardware, but they are logically separate servers. This is because the ZXTM VA for Windows software will be running inside a Microsoft Virtual Server Machine 6 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

7 To maintain service availability in the event of a physical failure you should deploy ZXTM VA for Windows and IAG servers in pairs. Once you have completed the installation and Initial Configuration Wizard on both ZXTM virtual appliances, you can join them into a cluster by using the join a cluster wizard from the ZXTM User Interface. The following diagram shows a typical ZXTM VA for Windows/IAG deployment. The ZXTM instances on Server One and Server Two are clustered together. ZXTM uses Traffic IP Groups to manage the High Availability of a service. In this example the ZXTM cluster has raised two IP addresses in the TIP Group, and All connections to those addresses are load balanced across the instances of the IAG software. The service will continue to run in the event of either physical server failing. Configuring Your ZXTM VA for Windows for IAG Service Typically, your IAG service will consist of a HTTP connector and a HTTPS connector. The HTTP connector will primarily be used to redirect connections to the HTTPS service. On your ZXTM cluster, you will need to configure these two services. Manage a new service wizard We will use a configuration wizard to create your new ZXTM services. From the ZXTM user interface, select the Manage a new service wizard from the wizards list on the top right of the home screen. The wizard will open in a new window, click the Next button to continue. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 7

8 Call the service Whale HTTPS, the protocol should be SSL, with a sub-protocol of HTTPS. ZXTM will select the default port of 443, but you may change this if you want to run the service on a different port. After clicking Next, you will be asked to add the nodes for this service. You should add the IP addresses that the two IAG servers are listening on. The port will default to the same port you configured in the previous screen, but you can change that if your IAG servers are listening on a non-standard port. Clicking Next will take you to a summary screen, if everything looks correct then click the Finish button. 8 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

9 The ZXTM will now create a Virtual Server (the service listener) and a Pool (a collection of nodes) for your new Whale HTTPS service, using the values you supplied to the wizard. You will need to repeat this process to create a Whale HTTP service, running on port 80, with a protocol of HTTP. Creating a Traffic IP Group ZXTM will have created your service and bound it to all IP addresses on the ZXTM. However if we want this service to be Highly Available, we need to configure a group of floating IP addresses, which ZXTM will always keep running even in the event of a hardware failure. In ZXTM terminology, these IP addresses are called Traffic IPs, and they are grouped together, so that you can have more than one IP active at a time. Groups of Traffic IPs are called Traffic IP Groups. We will now configure one for your Whale service. Navigate to the Services section and then the Traffic IP Groups tab. If you want the service to be active on both ZXTMs in your cluster you will need to create a group containing 2 Traffic IP addresses. In the example above I have called the group Whale Group and I want it to be active on both my ZXTMs. Therefore I have set 2 addresses in the IP Addresses field, and Clicking on Create Traffic IP Group will create the configuration and distribute it across the cluster. Next we need to bind our Whale HTTP and HTTPS services to this new TIP group. Binding a service to a Traffic IP Navigate to the Services section again, but this time select the Virtual Server tab. For each of your services, Whale HTTP and Whale HTTPS click the edit button and then under Basic Settings, change Listening on: to Traffic IP Groups. When you select this setting, you should now see a list of configured Traffic IP Groups to pick from. Select the Whale Group you created above. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 9

10 ZXTM will now bind your service to the IP addresses in the Traffic IP Group. In the event of one of your ZXTMs failing, the IP that was hosted on that ZXTM will migrate across to the ZXTM which is still running and service will continue. Session Persistence Many classes of requests from clients can be load-balanced across a pool of back-end servers. Multiple requests from one client can be shared across the back-ends with no disruption to service. However, there are certain exceptions, such as server applications which depend upon storing information about a client locally, which may not readily be load-balanced in this way (e.g. IAG). If the established connection were to be sent to a different IAG backend server then a server application error would occur and the user would be disconnected. To prevent this from happening, we use Session Persistence. When ZXTM receives a new connection, it uses its load balancing logic to choose a node for that connection. ZXTM then records the chosen node in a session persistence map. When another connection in the same session is received, ZXTM uses the node that was chosen previously. In this way, all connections in the same session are pinned to the same backend node. There are many different ways of implementing Session Persistence within ZXTM VA for Windows. The three ways we will be concentrating on in this document are: (1) SSL Session ID (2) IP-Based Session Persistence and (3) SSL Decryption/Re-encryption and Named Node Persistence. SSL Session ID In order for the service to function properly the ZXTM cluster needs to ensure that client connections are persisted to the correct IAG backend server. This is achieved with a Session Persistence class. Session Persistence is carried out at the pool level, so you should navigate to the pools tab within the Services section of the UI and edit your Whale HTTPS service. Then you should select Session Persistence. Comment [SW1]: I think we need a brief introductory paragraph for 'Persistence' explaining what it is and stating that there are three main ways of implementing persistence: SSL session; IP source address; using the advanced traffic inspection capabilities of ZXTM to persist upon any unique identification value in the traffic stream. 1 0 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

11 Because this is a new ZXTM installation we do not yet have any persistence classes to choose from. Therefore, we must create one now. Click on the Create New Session Persistence Class option. Call the class Whale SSL Session ID and leave the tick box checked to associate the new class with the Whale HTTPS pool. Click on the Create Class button. You will be taken to the Persistence class editing screen where you should change the type of persistence to SSL Session ID. This class uses the SSL Session ID to identify sessions and associate them with the correct backend IAG server. There is an important caveat that the SSL Session ID can change over time, either side of the connection may request that the session be renegotiated. If that occurs then the ZXTM will need to create a new mapping and could result in the session being sent to the other IAG server. If that causes problems you may consider using one of the other persistence methods. IP Based When IP-based persistence is selected, ZXTM will track the originating client s IP address for each request to the IAG pool. If ZXTM has already received traffic from this address, it will map requests to the same IAG backend it used previously IP session maps are shared by all ZXTM machines in a cluster. Requests received by different ZXTM machines will be directed to the correct IAG back end, and if one ZXTM fails, the other ZXTMs are aware of the IP session maps it was maintaining. To create an IP based session persistence, go the Services => Pools => Whale HTTPS => Session Persistence and create a new session persistence class. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 1 1

12 For the session persistence method, choose IP-based Persistence. Now your Whale HTTPS pool will be using IP-based session persistence. It should be noted that when using IP-based persistence, if you have a lot of clients connecting from behind the same proxy, they will all be presenting the same IP address to 1 2 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

13 the ZXTMs and so all of these connections will be sent to the same backend IAG server. One of your IAG servers may therefore be working significantly harder than the others. SSL Decryption/Re-encryption ZXTM can be used to decrypt the SSL connection and examine the contents of the SSL traffic. Decrypting the SSL traffic will allow ZXTM to access the http headers and also enable it to use the other Session Persistence methods (such as Transparent Session Affinity or to monitor Application Cookies). Please see the ZXTM User Manual for more information on the other Session Persistence methods supported by ZXTM. As SSL Session ID and IP-based persistence both have their potential drawbacks (as previously noted), the decryption of SSL allows for more sophisticated session persistence methods to be used. In our example, we will use the User-Agent to determine which of the two IAG backend servers to route the traffic to. In our example, all our business users use Internet Explorer as their browser while all our technical users (i.e. development and support departments) use either Opera or Firefox. We will configure ZXTM so that it uses the User-Agent to decide which IAG backend the traffic should go to and to persist to that backend node. In order to allow ZXTM to decrypt the SSL traffic, we need to import the IAG SSL certificate into ZXTM. First, we export (as a.pfx) the certificate and the private key from the IAG backend. Please consult your Microsoft Windows documentation for the procedure to export the certificate and the private key. Once we have the pfx file, we convert the pfx format into PEM format by either installing OpenSSL on a Windows machine or by using a Linux/Unix machine which has OpenSSL installed. On Windows the command to run is: openssl.exe pkcs12 -in <drive:\path\to\cert>.pfx -nodes -out <\path\to\new\cert>.pem On Linux/Unix, run : openssl pkcs12 -in </path/to/exported/cert>.pfx -nodes -out </path/to/new/cert>.pem The resulting file <cert>.pem will contain something like the following: Key Attributes X509v3 Key Usage: BEGIN RSA PRIVATE KEY----- MIICXAIBAAKBgQCoJF5JoVp6f2Gf2XB1BcPUcjr5zDczX8yBXw9MVBMjBKmJK4WG [snip] C+bu8DFl5OYe58KMDVUG3USCdnwsce8WrtMqzNL88V8= -----END RSA PRIVATE KEY----- Bag Attributes localkeyid: friendlyname: zeusiag D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 1 3

14 subject=/c=gb/st=cambridgeshire/l=cambridge/o=zeus Technology/OU=IT/CN=lb.contoso.com issuer=/dc=com/dc=contoso/cn=dc -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIKE9aOTQAAAAAAGzANBgkqhkiG9w0BAQUFADA7MRMwEQYK CZImiZPyLGQBGRYDY29tMRcwFQYKCZImiZPyLGQBGRYHY29udG9zbzELMAkGA1UE FK+kwETUOqAA3pKRvqE+4HAnIpuUZprofoGZ6q/v/dg/mTCX7tEMeA2SV0g8r1CB cym43qekmyvczeolglboxa0qyyyr+jhzliqcjwj3kfkevxmpvlgqvgblzis= -----END CERTIFICATE----- [snip] To create the certificate file, we copy all the lines from BEGIN CERTIFICATE to END CERTIFICATE to a new file and give the file a name. To create the private key, we copy all the lines from -BEGIN RSA PRIVATE KEY to -END RSA PRIVATE KEY-- You can now go the ZXTM user interface and import the certificate and private server key. Go to Catalogs => SSL => SSL Certificates Catalog => Import Certificate Once the certificate file and private key file are exported, we see the newly created certificate, in our case called lb.contoso.com. 1 4 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

15 We now need to create an SSL decryption virtual server. From the wizard: Notice the protocol is set to http and NOT https. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 1 5

16 Assign the two IAG IP addresses as backend nodes (note they are still listening on port 443). Once our Whale HTTPS Decrypt virtual server has been created, we need to edit it further to enable the decryption/re-encryption. Edit the SSL Settings for the virtual server (Services => Whale HTTPS Decrypt => SSL Decryption). Set the ssl_decrypt to yes and assign our SSL certificate lb.contoso.com as the cert to be used by the virtual server. 1 6 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

17 Once we have configured the SSL settings for the virtual server, we need to edit the SSL settings for the pool, System => Pools => Whale HTTPS Decrypt => SSL Settings. Now we need to make sure that ZXTM re-encrypts the SSL traffic before handing it over to the IAG backend server. We could, of course, always leave the traffic unencrypted if we were handing http (not https) to the backend servers. For the IAG backend servers, we will use https. Set ssl_encrypt to yes to get ZXTM to re-encrypt the traffic before sending to the IAG server. Now that we have our decryption/re-encryption virtual server up and running, we just need to test it before we proceed with using the User-Agent for session persistence. We connect to our url to see if we can access the IAG user interface with ZXTM decrypting/re-encrypting. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 1 7

18 Success! We can see the IAG login user interface, everything is working correctly. TrafficScript Example Now we can use the User-Agent for our session persistence purposes. As we already mentioned, ZXTM supports a number of different methods for Session Persistence such as application cookies etc. Decrypting the SSL traffic gives us an array of different options when it comes to persistence (see the ZXTM User Manual for more information on Session Persistence). We will be using Named Node persistence. We create a TrafficScript request rule (please note that ZXTM s Trafficscript scripting language is only supported in the full ZXTM licenses and not in the ZXTM LB license) to capture the User-Agent and, on the basis of which browser is being used, route the traffic to a particular IAG backend server. This kind of scenario would allow you to have a pool of IAG backend servers from which you can then allocate a particular IAG backend for a particular group (or group) of users etc Creating the TrafficScript request rule: 1 8 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

19 Contents of our rule : user-agent: $user_agent = http.getheader("user-agent"); D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 1 9

20 log.info("user Agent: ".$user_agent); #Business Users if (string.contains($user_agent,"msie")) { connection.setpersistencenode ( " :80" ); } # Technical users - Development and Support if (string.contains($user_agent,"firefox") string.contains($user_agent,"opera") ) { connection.setpersistencenode ( " :80" ); } Now we add this rule as a request rule to our virtual server: Now that we have the rule in place, our connection should persist on the relevant IAG backend server using the User-Agent to decide which IAG backend server to use. 2 0 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

21 We turn on Access Logging on our virtual server Whale HTTPS Decrypt so we can log the connections from the different browsers to the IAG backend nodes and check that our rule is directing traffic to the correct backend IAG node on the basis of which browser is being used. The macros for the log format are as follows: %F = The 'favored' node that ZXTM would like to use for this connection %n = Node that was used for the connection %N = Node required to handle this connection (because of session persistence) %{User-Agent} = user-agent header ie the browser used After performing tests with various browsers, we can examine the Access Logs for this virtual server. What we should see is that any connections to using IE get sent to and any connections from Opera or Firefox get sent to Looking at the log entries below, we can see this is the case : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 2 1

22 : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Opera/9.24 (Windows NT 5.1; U; en) : :443 Opera/9.24 (Windows NT 5.1; U; en) : :443 Opera/9.24 (Windows NT 5.1; U; en) : :443 Opera/9.24 (Windows NT 5.1; U; en) : :443 Opera/9.24 (Windows NT 5.1; U; en) : :443 Opera/9.24 (Windows NT 5.1; U; en) : :443 Opera/9.24 (Windows NT 5.1; U; en) : :443 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-us; rv: ) Gecko/ Firefox/ : :443 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-us; rv: ) Gecko/ Firefox/ : :443 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-us; rv: ) Gecko/ Firefox/ : :443 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-us; rv: ) Gecko/ Firefox/ : :443 Mozilla/5.0 (Windows; U; Windows NT 5.1; en-us; rv: ) Gecko/ Firefox/ Other rules could be applied to our traffic to take into account other factors such as day of week/time of day etc so we could on the basis of the time refuse a connection to the IAG backend servers. While SSL Session ID and IP-based session persistence are easier to setup than SSL decryption/re-encryption, these methods are not as sophisticated and are not as customisable. One of the great things about ZXTM VA for Windows is that it is very flexible and customisable. RuleBuilder Example We can, of course, also achieve the same functionality using RuleBuilder. RuleBuilder is supported in both ZXTM LB and full ZXTM installations. To do this we need to create 2 pools IAG1 containing :443 and IAG2 containing : D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

23 We need to modify both these pools to enable the SSL re-encryption before the traffic is sent to the IAG backend node. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 2 3

24 Now that we have created our two pools, we will now create the RuleBuilder rule that will examine the User-Agent and use this value to direct the traffic to the relevant IAG backend server. 2 4 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

25 We also create another rule called user-agent-iag2 but this time we set the User-Agent to contain Opera and the choose pool to be IAG2. Now we assign our two rules to our virtual server. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 2 5

26 Our Whale HTTPS Server will now use multiple pools. Although the default pool is set for Whale HTTPS Decrypt, the RuleBuilder rules will run first and so if the browser is MSIE or Opera the appropriate pool (IAG1 or IAG2) will be used instead of Whale HTTPS Decrypt. 2 6 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

27 If Firefox is used then none of the RuleBuilder rules will run and so Whale HTTPS Decrypt will be used. We need to apply Session Persistence to Whale HTTPS Decrypt so that the traffic will stick to an IAG backend node. As pool IAG1 and IAG2 only contain 1 IAG backend node, then we don t need to set Session Persistence on these pools. However if we were to add more IAG backend nodes and split them amongst the two pools we would need to apply Session Persistence to make sure that the traffic sticks to the correct IAG backend node. Firstly, we create the Session Persistence class. In this case we are using Transparent Session Affinity. In this persistence class, ZXTM adds a cookie to the response and uses this cookie to direct traffic to the correct IAG backend node. IAG server itself uses ASP session cookies so you could also use Monitor Application Cookies. Now, we apply the session persistence to our pool Whale HTTPS Decrypt. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 2 7

28 Now we are ready to test our RuleBuilder rules to make sure they are working as they should and sending traffic to the correct IAG backend node depending on whether the browser is MSIE or Opera. In our case, MSIE browser should be using :443 and Opera should be using :433. Looking at the access logs again, we can see that the correct IAG backend node is receiving the traffic: : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; : :443 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; :443 - Opera/9.24 (Windows NT 5.1; U; en) : :443 - Opera/9.24 (Windows NT 5.1; U; en) : :443 - Opera/9.24 (Windows NT 5.1; U; en) :443 - Opera/9.24 (Windows NT 5.1; U; en) :443 - Opera/9.24 (Windows NT 5.1; U; en) :443 - Opera/9.24 (Windows NT 5.1; U; en) 2 8 D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

29 :443 - Opera/9.24 (Windows NT 5.1; U; en) :443 - Opera/9.24 (Windows NT 5.1; U; en) : :443 - Opera/9.24 (Windows NT 5.1; U; en) So both our TrafficScript and RuleBuilder rules direct traffic correctly. Again, an important point to note is that Session Persistence is required when you have more than one IAG backend node in a pool. Otherwise you can use multiple pools with one IAG backend node and a rule to direct the traffic according to the decision making process you wish to use. Summary ZXTM can be used to both load balance and provide fault tolerance for your IAG servers. The high availability features of ZXTM can ensure that a user can always connect to an IAG server despite the loss of one or more of your IAG servers. The load balancing algorithms of ZXTM can be used to distribute traffic amongst the IAG servers on a simple round robin basis to a more complicated perceptive algorithm which takes into account the performance of each IAG backend node. A range of session persistence methods ensures that a connection sticks to a given IAG node while the use of SSL decryption by ZXTM offers a more powerful and customised way to make backend node choices. D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 2 9

30 Copyright Trademarks Zeus Technology Limited Copyright in this document belongs to Zeus Technology Limited. All rights are reserved. Zeus Technology, the Zeus logo, Zeus Web Server, Zeus Load Balancer, Zeus Extensible Traffic Manager, ZXTM and associated logos and abbreviations, TrafficScript, TrafficCluster and RuleBuilder are trademarks of Zeus Technology Limited. Other trademarks may be owned by third parties. Contact Information By If you would like to learn more about any of the topics covered by this white paper, please feel free to contact us for more information. You can reach us in a variety of ways: For general enquiries: For commercial and technical enquiries: For reseller information: For press and public relations information: By Telephone Zeus Technology UK: +44 (0) Zeus Technology US: Fax: +44 (0) By Post or in Person Zeus Technology Limited Zeus Technology The Jeffreys Building 1955 Landings Drive Cowley Road Mountain View Cambridge CB4 0WS CA United Kingdom United States Our web site contains a wealth of information on our products, services and solutions, as well as customer case studies and press information. For more information, please visit D E P L OY I N G Z X T M W I T H M I C R O S O F T I A G S E RV E R

31 knowledgehub.zeus.com The ZXTM KnowledgeHub is a key resource for developers and system administrators wishing to learn about ZXTM and Zeus Traffic Management solutions. It is located at D E P L OY I N G Z X T M W I T H M I C R O S O F T I AG S E RV E R 3 1

Guide to the LBaaS plugin ver. 1.0.2 for Fuel

Guide to the LBaaS plugin ver. 1.0.2 for Fuel Guide to the LBaaS plugin ver. 1.0.2 for Fuel Load Balancing plugin for Fuel LBaaS (Load Balancing as a Service) is currently an advanced service of Neutron that provides load balancing for Neutron multi

More information

Jeff Schertz MVP, MCITP, MCTS, MCP, MCSE

Jeff Schertz MVP, MCITP, MCTS, MCP, MCSE Jeff Schertz MVP, MCITP, MCTS, MCP, MCSE A comprehensive excerpt from Jeff Schertz s Lync Server MVP Blog Lync Web Services Load Balancing with KEMP VLM This article addresses a standard DNS Load Balanced

More information

Deploying Microsoft SharePoint Services with Stingray Traffic Manager DEPLOYMENT GUIDE

Deploying Microsoft SharePoint Services with Stingray Traffic Manager DEPLOYMENT GUIDE Deploying Microsoft SharePoint Services with Stingray Traffic Manager DEPLOYMENT GUIDE Table of Contents Overview... 2 Installation and Initial Configuration of SharePoint services... 3 System Requirements...

More information

Zeus Extensible Traffic Manager in Virtualized Hosting Environments.

Zeus Extensible Traffic Manager in Virtualized Hosting Environments. Zeus Extensible Traffic Manager in Virtualized Hosting Environments. Zeus Technology Limited Sales: +44 (0)1223 568555 The Jeffreys Building Main: +44 (0)1223 525000 Cowley Road Fax: +44 (0)1223 525100

More information

REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER

REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER NEFSIS TRAINING SERIES Nefsis Dedicated Server version 5.1.0.XXX Requirements and Implementation Guide (Rev 4-10209) REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER Nefsis Training Series

More information

DEPLOYMENT GUIDE Version 1.1. Deploying the BIG-IP LTM v10 with Citrix Presentation Server 4.5

DEPLOYMENT GUIDE Version 1.1. Deploying the BIG-IP LTM v10 with Citrix Presentation Server 4.5 DEPLOYMENT GUIDE Version 1.1 Deploying the BIG-IP LTM v10 with Citrix Presentation Server 4.5 Table of Contents Table of Contents Deploying the BIG-IP system v10 with Citrix Presentation Server Prerequisites

More information

A Layman's Guide to Global Server Load Balancing

A Layman's Guide to Global Server Load Balancing A Layman's Guide to Global Server Load Balancing Zeus Technology Limited (UK) Sales: +44 (0)1223 568555 Zeus Technology, Inc. (U.S.) Phone: (650) 965-4627 The Jeffreys Building Main: +44 (0)1223 525000

More information

Zeus Technology Limited Zeus Technology UK: +44 (0)1223 525000 The Jeffreys Building 5201 Great America Parkway Suite 320 US: +1-408-850-7204

Zeus Technology Limited Zeus Technology UK: +44 (0)1223 525000 The Jeffreys Building 5201 Great America Parkway Suite 320 US: +1-408-850-7204 ZXTM Virtual Appliance Getting Started Guide VMware Server 1.0, VMware ESX Server 3.0 Software Version 5.0 Zeus Technology Limited Zeus Technology UK: +44 (0)1223 525000 The Jeffreys Building 5201 Great

More information

NEFSIS DEDICATED SERVER

NEFSIS DEDICATED SERVER NEFSIS TRAINING SERIES Nefsis Dedicated Server version 5.2.0.XXX (DRAFT Document) Requirements and Implementation Guide (Rev5-113009) REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER Nefsis

More information

Load Balancing Microsoft Sharepoint 2010 Load Balancing Microsoft Sharepoint 2013. Deployment Guide

Load Balancing Microsoft Sharepoint 2010 Load Balancing Microsoft Sharepoint 2013. Deployment Guide Load Balancing Microsoft Sharepoint 2010 Load Balancing Microsoft Sharepoint 2013 Deployment Guide rev. 1.4.2 Copyright 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 3 Appliances

More information

Load Balancing Microsoft Terminal Services. Deployment Guide

Load Balancing Microsoft Terminal Services. Deployment Guide Load Balancing Microsoft Terminal Services Deployment Guide rev. 1.5.7 Copyright 2002 2016 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 4 Loadbalancer.org Appliances Supported... 4 Loadbalancer.org

More information

Load Balancing VMware Horizon View. Deployment Guide

Load Balancing VMware Horizon View. Deployment Guide Load Balancing VMware Horizon View Deployment Guide rev. 1.2.6 Copyright 2002 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide...4 Loadbalancer.org Appliances Supported...4 Loadbalancer.org

More information

Load Balancing VMware Horizon View. Deployment Guide

Load Balancing VMware Horizon View. Deployment Guide Load Balancing VMware Horizon View Deployment Guide v1.1.0 Copyright 2014 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 4 Appliances Supported... 4 VMware Horizon View Versions Supported...4

More information

Microsoft Internet Information Services (IIS) Deployment Guide

Microsoft Internet Information Services (IIS) Deployment Guide Microsoft Internet Information Services (IIS) Deployment Guide v1.2.9 Copyright 2013 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 4 Appliances Supported... 4 Microsoft IIS Software Versions

More information

App Orchestration 2.5

App Orchestration 2.5 Configuring NetScaler 10.5 Load Balancing with StoreFront 2.5.2 and NetScaler Gateway for Prepared by: James Richards Last Updated: August 20, 2014 Contents Introduction... 3 Configure the NetScaler load

More information

Microsoft Lync Server 2010

Microsoft Lync Server 2010 Microsoft Lync Server 2010 Scale to a Load Balanced Enterprise Edition Pool with WebMux Walkthrough Published: March. 2012 For the most up to date version of the Scale to a Load Balanced Enterprise Edition

More information

DEPLOYMENT GUIDE Version 1.2. Deploying F5 with Microsoft Exchange Server 2007

DEPLOYMENT GUIDE Version 1.2. Deploying F5 with Microsoft Exchange Server 2007 DEPLOYMENT GUIDE Version 1.2 Deploying F5 with Microsoft Exchange Server 2007 Table of Contents Table of Contents Deploying F5 devices with Microsoft Exchange Server 2007 Client Access Servers Prerequisites

More information

Sophos Mobile Control Installation guide. Product version: 3.5

Sophos Mobile Control Installation guide. Product version: 3.5 Sophos Mobile Control Installation guide Product version: 3.5 Document date: July 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...10 4 External

More information

Astaro Security Gateway V8. Remote Access via L2TP over IPSec Configuring ASG and Client

Astaro Security Gateway V8. Remote Access via L2TP over IPSec Configuring ASG and Client Astaro Security Gateway V8 Remote Access via L2TP over IPSec Configuring ASG and Client 1. Introduction This guide contains complementary information on the Administration Guide and the Online Help. If

More information

LoadMaster SSL Certificate Quickstart Guide

LoadMaster SSL Certificate Quickstart Guide LoadMaster SSL Certificate Quickstart Guide for the LM-1500, LM-2460, LM-2860, LM-3620, SM-1020 This guide serves as a complement to the LoadMaster documentation, and is not a replacement for the full

More information

Introduction to the EIS Guide

Introduction to the EIS Guide Introduction to the EIS Guide The AirWatch Enterprise Integration Service (EIS) provides organizations the ability to securely integrate with back-end enterprise systems from either the AirWatch SaaS environment

More information

Load Balancing. Outlook Web Access. Web Mail Using Equalizer

Load Balancing. Outlook Web Access. Web Mail Using Equalizer Load Balancing Outlook Web Access Web Mail Using Equalizer Copyright 2009 Coyote Point Systems, Inc. Printed in the USA. Publication Date: January 2009 Equalizer is a trademark of Coyote Point Systems

More information

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP System v10 with Microsoft IIS 7.0 and 7.5

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP System v10 with Microsoft IIS 7.0 and 7.5 DEPLOYMENT GUIDE Version 1.2 Deploying the BIG-IP System v10 with Microsoft IIS 7.0 and 7.5 Table of Contents Table of Contents Deploying the BIG-IP system v10 with Microsoft IIS Prerequisites and configuration

More information

DIGIPASS Authentication for Microsoft ISA 2006 Single Sign-On for Outlook Web Access

DIGIPASS Authentication for Microsoft ISA 2006 Single Sign-On for Outlook Web Access DIGIPASS Authentication for Microsoft ISA 2006 Single Sign-On for Outlook Web Access With IDENTIKEY Server / Axsguard IDENTIFIER Integration Guidelines Disclaimer Disclaimer of Warranties and Limitations

More information

SETUP SSL IN SHAREPOINT 2013 (USING SELF-SIGNED CERTIFICATE)

SETUP SSL IN SHAREPOINT 2013 (USING SELF-SIGNED CERTIFICATE) 12/15/2012 WALISYSTEMSINC.COM SETUP SSL IN SHAREPOINT 2013 (USING SELF-SIGNED CERTIFICATE) Setup SSL in SharePoint 2013 In the last article (link below), you learned how to setup SSL in SharePoint 2013

More information

User Manual. Onsight Management Suite Version 5.1. Another Innovation by Librestream

User Manual. Onsight Management Suite Version 5.1. Another Innovation by Librestream User Manual Onsight Management Suite Version 5.1 Another Innovation by Librestream Doc #: 400075-06 May 2012 Information in this document is subject to change without notice. Reproduction in any manner

More information

Introduction to Mobile Access Gateway Installation

Introduction to Mobile Access Gateway Installation Introduction to Mobile Access Gateway Installation This document describes the installation process for the Mobile Access Gateway (MAG), which is an enterprise integration component that provides a secure

More information

Astaro Security Gateway V8. Remote Access via SSL Configuring ASG and Client

Astaro Security Gateway V8. Remote Access via SSL Configuring ASG and Client Astaro Security Gateway V8 Remote Access via SSL Configuring ASG and Client 1. Introduction This guide contains complementary information on the Administration Guide and the Online Help. If you are not

More information

F-Secure Messaging Security Gateway. Deployment Guide

F-Secure Messaging Security Gateway. Deployment Guide F-Secure Messaging Security Gateway Deployment Guide TOC F-Secure Messaging Security Gateway Contents Chapter 1: Deploying F-Secure Messaging Security Gateway...3 1.1 The typical product deployment model...4

More information

App Orchestration 2.0

App Orchestration 2.0 App Orchestration 2.0 Configuring NetScaler Load Balancing and NetScaler Gateway for App Orchestration Prepared by: Christian Paez Version: 1.0 Last Updated: December 13, 2013 2013 Citrix Systems, Inc.

More information

Deploying the Barracuda Load Balancer with Microsoft Exchange Server 2010 Version 2.6. Introduction. Table of Contents

Deploying the Barracuda Load Balancer with Microsoft Exchange Server 2010 Version 2.6. Introduction. Table of Contents Deploying the Barracuda Load Balancer with Microsoft Exchange Server 2010 Version 2.6 Introduction Organizations use the Barracuda Load Balancer to distribute the load and increase the availability of

More information

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP System v9.x with Microsoft IIS 7.0 and 7.5

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP System v9.x with Microsoft IIS 7.0 and 7.5 DEPLOYMENT GUIDE Version 1.2 Deploying the BIG-IP System v9.x with Microsoft IIS 7.0 and 7.5 Deploying F5 with Microsoft IIS 7.0 and 7.5 F5's BIG-IP system can increase the existing benefits of deploying

More information

ClusterLoad ESX Virtual Appliance quick start guide v6.3

ClusterLoad ESX Virtual Appliance quick start guide v6.3 ClusterLoad ESX Virtual Appliance quick start guide v6.3 ClusterLoad terminology...2 What are your objectives?...3 What is the difference between a one-arm and a two-arm configuration?...3 What are the

More information

KeyControl Installation on Amazon Web Services

KeyControl Installation on Amazon Web Services KeyControl Installation on Amazon Web Services Contents Introduction Deploying an initial KeyControl Server Deploying an Elastic Load Balancer (ELB) Adding a KeyControl node to a cluster in the same availability

More information

Installing and Configuring vcloud Connector

Installing and Configuring vcloud Connector Installing and Configuring vcloud Connector vcloud Connector 2.7.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new

More information

DEPLOYMENT GUIDE. Deploying the BIG-IP LTM v9.x with Microsoft Windows Server 2008 Terminal Services

DEPLOYMENT GUIDE. Deploying the BIG-IP LTM v9.x with Microsoft Windows Server 2008 Terminal Services DEPLOYMENT GUIDE Deploying the BIG-IP LTM v9.x with Microsoft Windows Server 2008 Terminal Services Deploying the BIG-IP LTM system and Microsoft Windows Server 2008 Terminal Services Welcome to the BIG-IP

More information

Secure Web Appliance. SSL Intercept

Secure Web Appliance. SSL Intercept Secure Web Appliance SSL Intercept Table of Contents 1. Introduction... 1 1.1. About CYAN Secure Web Appliance... 1 1.2. About SSL Intercept... 1 1.3. About this Manual... 1 1.3.1. Document Conventions...

More information

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP system v10 with Microsoft Exchange Outlook Web Access 2007

DEPLOYMENT GUIDE Version 1.2. Deploying the BIG-IP system v10 with Microsoft Exchange Outlook Web Access 2007 DEPLOYMENT GUIDE Version 1.2 Deploying the BIG-IP system v10 with Microsoft Exchange Outlook Web Access 2007 Table of Contents Table of Contents Deploying the BIG-IP system v10 with Microsoft Outlook Web

More information

Load Balancing Microsoft Remote Desktop Services. Deployment Guide

Load Balancing Microsoft Remote Desktop Services. Deployment Guide Load Balancing Microsoft Remote Desktop Services Deployment Guide rev. 1.0.5 Copyright 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 4 Appliances Supported... 4 Microsoft Windows

More information

DEPLOYMENT GUIDE. Deploying F5 for High Availability and Scalability of Microsoft Dynamics 4.0

DEPLOYMENT GUIDE. Deploying F5 for High Availability and Scalability of Microsoft Dynamics 4.0 DEPLOYMENT GUIDE Deploying F5 for High Availability and Scalability of Microsoft Dynamics 4.0 Introducing the F5 and Microsoft Dynamics CRM configuration Microsoft Dynamics CRM is a full customer relationship

More information

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH CITRIX PRESENTATION SERVER 3.0 AND 4.5

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH CITRIX PRESENTATION SERVER 3.0 AND 4.5 DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH CITRIX PRESENTATION SERVER 3.0 AND 4.5 Deploying F5 BIG-IP Local Traffic Manager with Citrix Presentation Server Welcome to the F5 BIG-IP Deployment

More information

Deployment Guide Microsoft IIS 7.0

Deployment Guide Microsoft IIS 7.0 Deployment Guide Microsoft IIS 7.0 DG_IIS_022012.1 TABLE OF CONTENTS 1 Introduction... 4 2 Deployment Guide Overview... 4 3 Deployment Guide Prerequisites... 4 4 Accessing the AX Series Load Balancer...

More information

Sharp Remote Device Manager (SRDM) Server Software Setup Guide

Sharp Remote Device Manager (SRDM) Server Software Setup Guide Sharp Remote Device Manager (SRDM) Server Software Setup Guide This Guide explains how to install the software which is required in order to use Sharp Remote Device Manager (SRDM). SRDM is a web-based

More information

Wavecrest Certificate

Wavecrest Certificate Wavecrest InstallationGuide Wavecrest Certificate www.wavecrest.net Copyright Copyright 1996-2015, Wavecrest Computing, Inc. All rights reserved. Use of this product and this manual is subject to license.

More information

Resonate Central Dispatch

Resonate Central Dispatch Resonate Central Dispatch Microsoft Exchange 2010 Resonate, Inc. Tel. + 1.408.545.5535 Fax + 1.408.545.5502 www.resonate.com Copyright 2013 Resonate, Inc. All rights reserved. Resonate Incorporated and

More information

DEPLOYMENT GUIDE DEPLOYING F5 WITH MICROSOFT WINDOWS SERVER 2008

DEPLOYMENT GUIDE DEPLOYING F5 WITH MICROSOFT WINDOWS SERVER 2008 DEPLOYMENT GUIDE DEPLOYING F5 WITH MICROSOFT WINDOWS SERVER 2008 Table of Contents Table of Contents Deploying F5 with Microsoft Windows Server 2008 Prerequisites and configuration notes...1-1 Deploying

More information

Deployment Guide. Deploying F5 BIG-IP Global Traffic Manager on VMware vcloud Hybrid Service

Deployment Guide. Deploying F5 BIG-IP Global Traffic Manager on VMware vcloud Hybrid Service Deployment Guide Deploying F5 BIG-IP Global Traffic Manager on VMware vcloud Hybrid Service A. Introduction VMware vcloud Hybrid Service is an effective, flexible and reliable platform for enterprise customers

More information

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH MICROSOFT WINDOWS SERVER 2008 TERMINAL SERVICES

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH MICROSOFT WINDOWS SERVER 2008 TERMINAL SERVICES DEPLOYMENT GUIDE DEPLOYING THE BIG-IP LTM SYSTEM WITH MICROSOFT WINDOWS SERVER 2008 TERMINAL SERVICES Deploying the BIG-IP LTM system and Microsoft Windows Server 2008 Terminal Services Welcome to the

More information

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP LTM System with VMware View

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP LTM System with VMware View DEPLOYMENT GUIDE Version 1.0 Deploying the BIG-IP LTM System with VMware View Table of Contents Table of Contents Deploying F5 with VMware View Prerequisites and configuration notes...1-1 Product versions

More information

White Paper. Installation and Configuration of Fabasoft Folio IMAP Service. Fabasoft Folio 2015 Update Rollup 3

White Paper. Installation and Configuration of Fabasoft Folio IMAP Service. Fabasoft Folio 2015 Update Rollup 3 White Paper Fabasoft Folio 2015 Update Rollup 3 Copyright Fabasoft R&D GmbH, Linz, Austria, 2016. All rights reserved. All hardware and software names used are registered trade names and/or registered

More information

Load Balancing Bloxx Web Filter. Deployment Guide

Load Balancing Bloxx Web Filter. Deployment Guide Load Balancing Bloxx Web Filter Deployment Guide rev. 1.1.8 Copyright 2002 2016 Loadbalancer.org, Inc. 1 Table of Contents About this Guide...4 Loadbalancer.org Appliances Supported...4 Loadbalancer.org

More information

Load Balancing Microsoft AD FS. Deployment Guide

Load Balancing Microsoft AD FS. Deployment Guide Load Balancing Microsoft AD FS Deployment Guide rev. 1.1.1 Copyright 2002 2015 Loadbalancer.org, Inc. Table of Contents About this Guide...4 Loadbalancer.org Appliances Supported...4 Loadbalancer.org Software

More information

Configuring Windows Server Clusters

Configuring Windows Server Clusters Configuring Windows Server Clusters In Enterprise network, group of servers are often used to provide a common set of services. For example, Different physical computers can be used to answer request directed

More information

SSL... 2 2.1. 3 2.2. 2.2.1. 2.2.2. SSL VPN

SSL... 2 2.1. 3 2.2. 2.2.1. 2.2.2. SSL VPN 1. Introduction... 2 2. Remote Access via SSL... 2 2.1. Configuration of the Astaro Security Gateway... 3 2.2. Configuration of the Remote Client...10 2.2.1. Astaro User Portal: Getting Software and Certificates...10

More information

Scenarios for Setting Up SSL Certificates for View

Scenarios for Setting Up SSL Certificates for View Scenarios for Setting Up SSL Certificates for View VMware Horizon 6.0 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a

More information

Load Balancing Trend Micro InterScan Web Gateway

Load Balancing Trend Micro InterScan Web Gateway Load Balancing Trend Micro InterScan Web Gateway Deployment Guide rev. 1.1.7 Copyright 2002 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 3 Loadbalancer.org Appliances Supported...

More information

Cyclope Internet Filtering Proxy

Cyclope Internet Filtering Proxy Cyclope Internet Filtering Proxy - Installation Guide - Cyclope-Series - 2010 - Table of contents 1. Overview - 3-2. Installation - 4-2.1. System requirements - 4-2.2. Cyclope Internet Filtering Proxy

More information

How to: Install an SSL certificate

How to: Install an SSL certificate How to: Install an SSL certificate Introduction This document will talk you through the process of installing an SSL certificate on your server. Once you have approved the request for your certificate

More information

Brocade Virtual Traffic Manager and Microsoft SharePoint 2013 Deployment Guide

Brocade Virtual Traffic Manager and Microsoft SharePoint 2013 Deployment Guide September 2015 Brocade Virtual Traffic Manager and Microsoft SharePoint 2013 Deployment Guide 2015 Brocade Communications Systems, Inc. All Rights Reserved. ADX, Brocade, Brocade Assurance, the B-wing

More information

Deploying Virtual Cyberoam Appliance in the Amazon Cloud Version 10

Deploying Virtual Cyberoam Appliance in the Amazon Cloud Version 10 Deploying Virtual Cyberoam Appliance in the Amazon Cloud Version 10 Document version 1.0 10.6.2.378-13/03/2015 Important Notice Cyberoam Technologies Pvt. Ltd. has supplied this Information believing it

More information

Installing and Configuring vcenter Support Assistant

Installing and Configuring vcenter Support Assistant Installing and Configuring vcenter Support Assistant vcenter Support Assistant 5.5 This document supports the version of each product listed and supports all subsequent versions until the document is replaced

More information

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP LTM with Apache Tomcat and Apache HTTP Server

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP LTM with Apache Tomcat and Apache HTTP Server DEPLOYMENT GUIDE Version 1.0 Deploying the BIG-IP LTM with Apache Tomcat and Apache HTTP Server Table of Contents Table of Contents Deploying the BIG-IP LTM with Tomcat application servers and Apache web

More information

Unifying Information Security. Implementing TLS on the CLEARSWIFT SECURE Email Gateway

Unifying Information Security. Implementing TLS on the CLEARSWIFT SECURE Email Gateway Unifying Information Security Implementing TLS on the CLEARSWIFT SECURE Email Gateway Contents 1 Introduction... 3 2 Understanding TLS... 4 3 Clearswift s Application of TLS... 5 3.1 Opportunistic TLS...

More information

Load Balancing Web Proxies Load Balancing Web Filters Load Balancing Web Gateways. Deployment Guide

Load Balancing Web Proxies Load Balancing Web Filters Load Balancing Web Gateways. Deployment Guide Load Balancing Web Proxies Load Balancing Web Filters Load Balancing Web Gateways Deployment Guide rev. 1.4.9 Copyright 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 3 Appliances

More information

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP SYSTEM WITH MICROSOFT INTERNET INFORMATION SERVICES (IIS) 7.0

DEPLOYMENT GUIDE DEPLOYING THE BIG-IP SYSTEM WITH MICROSOFT INTERNET INFORMATION SERVICES (IIS) 7.0 DEPLOYMENT GUIDE DEPLOYING THE BIG-IP SYSTEM WITH MICROSOFT INTERNET INFORMATION SERVICES (IIS) 7.0 Deploying F5 with Microsoft IIS 7.0 F5's BIG-IP system can increase the existing benefits of deploying

More information

Load Balancing Exchange 2007 Client Access Servers using Windows Network Load- Balancing Technology

Load Balancing Exchange 2007 Client Access Servers using Windows Network Load- Balancing Technology Load Balancing Exchange 2007 Client Access Servers using Windows Network Load- Balancing Technology In this article I will show you how you can load-balance Exchange 2007 Client Access Servers (CAS) using

More information

Sophos Mobile Control SaaS startup guide. Product version: 6

Sophos Mobile Control SaaS startup guide. Product version: 6 Sophos Mobile Control SaaS startup guide Product version: 6 Document date: January 2016 Contents 1 About this guide...4 2 About Sophos Mobile Control...5 3 What are the key steps?...7 4 Change your password...8

More information

Sophos Mobile Control Installation guide. Product version: 3

Sophos Mobile Control Installation guide. Product version: 3 Sophos Mobile Control Installation guide Product version: 3 Document date: January 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...16 4 External

More information

Brocade Virtual Traffic Manager and Microsoft IIS Deployment Guide

Brocade Virtual Traffic Manager and Microsoft IIS Deployment Guide September 2015 Brocade Virtual Traffic Manager and Microsoft IIS Deployment Guide 2015 Brocade Communications Systems, Inc. All Rights Reserved. ADX, Brocade, Brocade Assurance, the B-wing symbol, DCX,

More information

Windows Intune Walkthrough: Windows Phone 8 Management

Windows Intune Walkthrough: Windows Phone 8 Management Windows Intune Walkthrough: Windows Phone 8 Management This document will review all the necessary steps to setup and manage Windows Phone 8 using the Windows Intune service. Note: If you want to test

More information

Configuring and Implementing A10

Configuring and Implementing A10 IMPLEMENTATION GUIDE Configuring and Implementing A10 Networks Load Balancing Solution with Juniper s SSL VPN Appliances Although Juniper Networks has attempted to provide accurate information in this

More information

Load Balancing Sophos Web Gateway. Deployment Guide

Load Balancing Sophos Web Gateway. Deployment Guide Load Balancing Sophos Web Gateway Deployment Guide rev. 1.0.9 Copyright 2002 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide...3 Loadbalancer.org Appliances Supported...3 Loadbalancer.org

More information

Configuration Guide. BES12 Cloud

Configuration Guide. BES12 Cloud Configuration Guide BES12 Cloud Published: 2016-04-08 SWD-20160408113328879 Contents About this guide... 6 Getting started... 7 Configuring BES12 for the first time...7 Administrator permissions you need

More information

WebMux Network Traffic Manager

WebMux Network Traffic Manager WebMux Network Traffic Manager Microsoft Exchange Server 2010 and 2013 Quick Setup Guide Version v11.0.01 (Revision April 2015) www.avanu.com Table of Contents Introduction... 4 The WebMux Configuration

More information

Sophos Mobile Control Installation guide

Sophos Mobile Control Installation guide Sophos Mobile Control Installation guide Product version: 2.5 Document date: July 2012 Contents 1 Introduction... 3 2 The Sophos Mobile Control server... 4 3 Set up Sophos Mobile Control... 13 4 Running

More information

Customer Tips. Xerox Network Scanning HTTP/HTTPS Configuration using Microsoft IIS. for the user. Purpose. Background

Customer Tips. Xerox Network Scanning HTTP/HTTPS Configuration using Microsoft IIS. for the user. Purpose. Background Xerox Multifunction Devices Customer Tips June 5, 2007 This document applies to these Xerox products: X WC Pro 232/238/245/ 255/265/275 for the user Xerox Network Scanning HTTP/HTTPS Configuration using

More information

Microsoft Office Communications Server 2007 & Coyote Point Equalizer Deployment Guide DEPLOYMENT GUIDE

Microsoft Office Communications Server 2007 & Coyote Point Equalizer Deployment Guide DEPLOYMENT GUIDE Microsoft Office Communications Server 2007 & Coyote Point Equalizer DEPLOYMENT GUIDE Table of Contents Unified Communications Application Delivery...2 General Requirements...6 Equalizer Configuration...7

More information

Microsoft SharePoint 2010 Deployment with Coyote Point Equalizer

Microsoft SharePoint 2010 Deployment with Coyote Point Equalizer The recognized leader in proven and affordable load balancing and application delivery solutions Deployment Guide Microsoft SharePoint 2010 Deployment with Coyote Point Equalizer Coyote Point Systems,

More information

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP LTM with the Zimbra Open Source Email and Collaboration Suite

DEPLOYMENT GUIDE Version 1.0. Deploying the BIG-IP LTM with the Zimbra Open Source Email and Collaboration Suite DEPLOYMENT GUIDE Version 1.0 Deploying the BIG-IP LTM with the Zimbra Open Source Email and Collaboration Suite Table of Contents Table of Contents Deploying the BIG-IP LTM with the Zimbra Open Source

More information

DEPLOYMENT GUIDE CONFIGURING THE BIG-IP LTM SYSTEM WITH FIREPASS CONTROLLERS FOR LOAD BALANCING AND SSL OFFLOAD

DEPLOYMENT GUIDE CONFIGURING THE BIG-IP LTM SYSTEM WITH FIREPASS CONTROLLERS FOR LOAD BALANCING AND SSL OFFLOAD DEPLOYMENT GUIDE CONFIGURING THE BIG-IP LTM SYSTEM WITH FIREPASS CONTROLLERS FOR LOAD BALANCING AND SSL OFFLOAD Configuring the BIG-IP LTM system for use with FirePass controllers Welcome to the Configuring

More information

Web Application Firewall

Web Application Firewall Web Application Firewall Getting Started Guide August 3, 2015 Copyright 2014-2015 by Qualys, Inc. All Rights Reserved. Qualys and the Qualys logo are registered trademarks of Qualys, Inc. All other trademarks

More information

NSi Mobile Installation Guide. Version 6.2

NSi Mobile Installation Guide. Version 6.2 NSi Mobile Installation Guide Version 6.2 Revision History Version Date 1.0 October 2, 2012 2.0 September 18, 2013 2 CONTENTS TABLE OF CONTENTS PREFACE... 5 Purpose of this Document... 5 Version Compatibility...

More information

SSL-VPN 200 Getting Started Guide

SSL-VPN 200 Getting Started Guide Secure Remote Access Solutions APPLIANCES SonicWALL SSL-VPN Series SSL-VPN 200 Getting Started Guide SonicWALL SSL-VPN 200 Appliance Getting Started Guide Thank you for your purchase of the SonicWALL SSL-VPN

More information

DEPLOYMENT GUIDE Version 2.1. Deploying F5 with Microsoft SharePoint 2010

DEPLOYMENT GUIDE Version 2.1. Deploying F5 with Microsoft SharePoint 2010 DEPLOYMENT GUIDE Version 2.1 Deploying F5 with Microsoft SharePoint 2010 Table of Contents Table of Contents Introducing the F5 Deployment Guide for Microsoft SharePoint 2010 Prerequisites and configuration

More information

An Oracle White Paper March, 2012. Enterprise Manager 12c Cloud Control: Configuring OMS High Availability with F5 BIG- IP Local Traffic Manager

An Oracle White Paper March, 2012. Enterprise Manager 12c Cloud Control: Configuring OMS High Availability with F5 BIG- IP Local Traffic Manager An Oracle White Paper March, 2012 Enterprise Manager 12c Cloud Control: Configuring OMS High Availability with F5 BIG- IP Local Traffic Manager Executive Overview... 2 About F5 BIG-IP and Oracle Enterprise

More information

Improving Microsoft Exchange 2013 performance with NetScaler Hands-on Lab Exercise Guide. Johnathan Campos

Improving Microsoft Exchange 2013 performance with NetScaler Hands-on Lab Exercise Guide. Johnathan Campos Improving Microsoft Exchange 2013 performance with NetScaler Hands-on Lab Exercise Guide Johnathan Campos Contents Contents... 1 Overview... 2 Scenario... 6 Exercise 1 - Initial Configuration... 7 Exercise

More information

System Administration Training Guide. S100 Installation and Site Management

System Administration Training Guide. S100 Installation and Site Management System Administration Training Guide S100 Installation and Site Management Table of contents System Requirements for Acumatica ERP 4.2... 5 Learning Objects:... 5 Web Browser... 5 Server Software... 5

More information

IIS, FTP Server and Windows

IIS, FTP Server and Windows IIS, FTP Server and Windows The Objective: To setup, configure and test FTP server. Requirement: Any version of the Windows 2000 Server. FTP Windows s component. Internet Information Services, IIS. Steps:

More information

Sophos Mobile Control Installation guide. Product version: 3.6

Sophos Mobile Control Installation guide. Product version: 3.6 Sophos Mobile Control Installation guide Product version: 3.6 Document date: November 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...5 3 Set up Sophos Mobile Control...11 4 External

More information

Configuring Security Features of Session Recording

Configuring Security Features of Session Recording Configuring Security Features of Session Recording Summary This article provides information about the security features of Citrix Session Recording and outlines the process of configuring Session Recording

More information

Microsoft Lync Server Overview

Microsoft Lync Server Overview Organizations can use the to enhance the scalability and availability of their Microsoft Lync Server 2010 deployments (formerly known as Microsoft Office Communications Server). Barracuda Networks has

More information

How to configure HTTPS proxying in Zorp 5

How to configure HTTPS proxying in Zorp 5 How to configure HTTPS proxying in Zorp 5 June 24, 2014 This tutorial describes how to configure Zorp to proxy HTTPS traffic Copyright 1996-2014 BalaBit IT Security Ltd. Table of Contents 1. Preface...

More information

Availability Digest. www.availabilitydigest.com. Redundant Load Balancing for High Availability July 2013

Availability Digest. www.availabilitydigest.com. Redundant Load Balancing for High Availability July 2013 the Availability Digest Redundant Load Balancing for High Availability July 2013 A large data center can comprise hundreds or thousands of servers. These servers must not only be interconnected, but they

More information

Load Balancing McAfee Web Gateway. Deployment Guide

Load Balancing McAfee Web Gateway. Deployment Guide Load Balancing McAfee Web Gateway Deployment Guide rev. 1.1.4 Copyright 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 3 Loadbalancer.org Appliances Supported...3 Loadbalancer.org

More information

Upgrading from Call Center Reporting to Reporting for Contact Center. BCM Contact Center

Upgrading from Call Center Reporting to Reporting for Contact Center. BCM Contact Center Upgrading from Call Center Reporting to Reporting for Contact Center BCM Contact Center Document Number: NN40010-400 Document Status: Standard Document Version: 02.00 Date: June 2006 Copyright Nortel Networks

More information

Appliance Quick Start Guide. v7.6

Appliance Quick Start Guide. v7.6 Appliance Quick Start Guide v7.6 rev. 1.0.7 Copyright 2002 2015 Loadbalancer.org, Inc. Table of Contents Loadbalancer.org Terminology... 4 What is a Virtual IP Address?... 5 What is a Floating IP Address?...

More information

CumuLogic Load Balancer Overview Guide. March 2013. CumuLogic Load Balancer Overview Guide 1

CumuLogic Load Balancer Overview Guide. March 2013. CumuLogic Load Balancer Overview Guide 1 CumuLogic Load Balancer Overview Guide March 2013 CumuLogic Load Balancer Overview Guide 1 Table of Contents CumuLogic Load Balancer... 3 Architectural Overview of CumuLogic Load Balancer... 4 How to Use

More information

Load Balancing Barracuda Web Filter. Deployment Guide

Load Balancing Barracuda Web Filter. Deployment Guide Load Balancing Barracuda Web Filter Deployment Guide rev. 1.1.4 Copyright 2015 Loadbalancer.org, Inc. 1 Table of Contents About this Guide... 3 Loadbalancer.org Appliances Supported...3 Loadbalancer.org

More information

Brocade Virtual Traffic Manager and Microsoft Skype for Business 2015 Deployment Guide

Brocade Virtual Traffic Manager and Microsoft Skype for Business 2015 Deployment Guide January 2016 Brocade Virtual Traffic Manager and Microsoft Skype for Business 2015 Deployment Guide 2016 Brocade Communications Systems, Inc. All Rights Reserved. Brocade, Brocade Assurance, the B-wing

More information