PA 500, Hairpin routing and front ending certs

u7483 — Mon, 12 Mar 2012 11:00:48 GMT

I am trying to implement a Exchange 2010 setup and the consultant is asking if the PA can handle HairPin routng and if it can front end the certs for the Exchange systems. I haven't a clue and google results were less than clear, so am turning to the forums and hopeing someone else does. Anyone?

Re: PA 500, Hairpin routing and front ending certs

mikand — Mon, 12 Mar 2012 21:10:32 GMT

I think you can solve that hairpinning with a DNAT rule if you need that (but I would prefer avoiding DNAT if possible).

By front ending certs I assume you mean that the PAN will do the SSL stuff so it is SSL between client and PAN and then just cleartext (or another SSL) between PAN and the Exchange server (so that the PAN can use appid on the traffic to only allow whatever its needed)? And yes PAN can do that (if im not mistaken this was improved in 4.0 or if it was 4.1 to have several certs which you in the decrypt rules choose which to use for which flow).

topic PA 500, Hairpin routing and front ending certs in General Topics

PA 500, Hairpin routing and front ending certs

Re: PA 500, Hairpin routing and front ending certs