<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments for The F5 Guy</title>
	<atom:link href="http://www.TheF5Guy.com/blog/index.php/comments/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.TheF5Guy.com/blog</link>
	<description>F5 BIG-IP, SharePoint and Other Technologies...</description>
	<lastBuildDate>Tue, 07 Feb 2012 14:21:44 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by naladar</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-6086</link>
		<dc:creator>naladar</dc:creator>
		<pubDate>Tue, 07 Feb 2012 14:21:44 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-6086</guid>
		<description>Thanks for the feedback!  If that is how you have the trusted zone setup then that is the way to go for certain.  Our zones are setup a little differently with the idea that we place more trust in the local zone because it is local and has been vetted and probably is an inhouse application like SharePoint.  The trusted zone is treated like a third party apps zone.  The automatic login with credentials checked is definitely what it hinges on though.  I will update the article with the specific setting as it certainly makes more sense for them to check that setting directly.</description>
		<content:encoded><![CDATA[<p>Thanks for the feedback!  If that is how you have the trusted zone setup then that is the way to go for certain.  Our zones are setup a little differently with the idea that we place more trust in the local zone because it is local and has been vetted and probably is an inhouse application like SharePoint.  The trusted zone is treated like a third party apps zone.  The automatic login with credentials checked is definitely what it hinges on though.  I will update the article with the specific setting as it certainly makes more sense for them to check that setting directly.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by Tom</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-6033</link>
		<dc:creator>Tom</dc:creator>
		<pubDate>Tue, 31 Jan 2012 14:34:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-6033</guid>
		<description>F5Guy,
In your article you say \The only caveat to this is that the site that you are accessing needs to be inside of the \LOCAL INTRANET\ zone inside of IE.  WARNING:  NOT THE TRUSTED SITES LIST!!! \
We usually have the opposite effect, as our trusted zone has the setting for automatic login with credentials checked. Was there some other reason for this?</description>
		<content:encoded><![CDATA[<p>F5Guy,<br />
In your article you say \The only caveat to this is that the site that you are accessing needs to be inside of the \LOCAL INTRANET\ zone inside of IE.  WARNING:  NOT THE TRUSTED SITES LIST!!! \<br />
We usually have the opposite effect, as our trusted zone has the setting for automatic login with credentials checked. Was there some other reason for this?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Live Meeting Portal Server and BIG-IP LTM by Best VPS Hosting</title>
		<link>http://www.TheF5Guy.com/blog/2010/04/live-meeting-portal-server-and-big-ip-ltm/comment-page-1/#comment-5906</link>
		<dc:creator>Best VPS Hosting</dc:creator>
		<pubDate>Wed, 28 Dec 2011 15:44:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=946#comment-5906</guid>
		<description>The BIG-IP LTM VE gives you the same industry leading advanced application delivery capabilities with the flexibility of a virtual deployment model. The BIG-IP LTM VE offers customers freedom to combine physical &amp; virtual appliances in an integrated application delivery architecture for optimal efficiency, scalability, and reliability. LTM VE comes with the same world-class support as the rest of F5&#039;s products.</description>
		<content:encoded><![CDATA[<p>The BIG-IP LTM VE gives you the same industry leading advanced application delivery capabilities with the flexibility of a virtual deployment model. The BIG-IP LTM VE offers customers freedom to combine physical &amp; virtual appliances in an integrated application delivery architecture for optimal efficiency, scalability, and reliability. LTM VE comes with the same world-class support as the rest of F5&#8242;s products.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on PRK Eye Surgery &#8211; The LASIK Vision Institute by naladar</title>
		<link>http://www.TheF5Guy.com/blog/2011/10/prk-eye-surgery-the-lasik-vision-institute/comment-page-1/#comment-5887</link>
		<dc:creator>naladar</dc:creator>
		<pubDate>Wed, 21 Dec 2011 16:26:14 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1394#comment-5887</guid>
		<description>Hehehe... knifed by my brother during one of our disagreements, caught a bullet ricochet in the shoulder from a gun that was fired by my brother and the wisdom tooth had to come out on a Sunday.  The Doc said that it would hurt more to put in novacaine than it would be to just pull it and there wasn&#039;t an anesthesiologist in a 100 mile radius that would be willing to work on Sunday anyway so that&#039;s just how we did it!</description>
		<content:encoded><![CDATA[<p>Hehehe&#8230; knifed by my brother during one of our disagreements, caught a bullet ricochet in the shoulder from a gun that was fired by my brother and the wisdom tooth had to come out on a Sunday.  The Doc said that it would hurt more to put in novacaine than it would be to just pull it and there wasn&#8217;t an anesthesiologist in a 100 mile radius that would be willing to work on Sunday anyway so that&#8217;s just how we did it!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on PRK Eye Surgery &#8211; The LASIK Vision Institute by The Bhattman</title>
		<link>http://www.TheF5Guy.com/blog/2011/10/prk-eye-surgery-the-lasik-vision-institute/comment-page-1/#comment-5886</link>
		<dc:creator>The Bhattman</dc:creator>
		<pubDate>Wed, 21 Dec 2011 15:42:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1394#comment-5886</guid>
		<description>Thanks for sharing.  You have to also share about you being knifed, shot, and why you would get your Wisdom tooth pulled out without anesthesia</description>
		<content:encoded><![CDATA[<p>Thanks for sharing.  You have to also share about you being knifed, shot, and why you would get your Wisdom tooth pulled out without anesthesia</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on SharePoint 2010 &#8211; Creating .OSDX Files For Federated Search by Flo</title>
		<link>http://www.TheF5Guy.com/blog/2011/05/sharepoint-2010-creating-osdx-files-for-federated-search/comment-page-1/#comment-5821</link>
		<dc:creator>Flo</dc:creator>
		<pubDate>Thu, 01 Dec 2011 12:26:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1257#comment-5821</guid>
		<description>So how do you come from this xml to an osdx file?</description>
		<content:encoded><![CDATA[<p>So how do you come from this xml to an osdx file?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by TheF5Guy</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-4749</link>
		<dc:creator>TheF5Guy</dc:creator>
		<pubDate>Sun, 16 Oct 2011 02:29:49 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-4749</guid>
		<description>That certainly seems like a lot of different names to access the same environment.  In my experience we do not use the server names in AAM&#039;s.  What I would recommend is calling your web service using the http://enet AAM that you have setup as the default. 

To test whether or not you have the AAM&#039;s setup correctly, open the site up using the hostname of the URL that you want to run the web service queries to and then use some of the admin functions, like adding users to the site, etc... if any of those fail it is likely due to having an incorrect AAM setup.</description>
		<content:encoded><![CDATA[<p>That certainly seems like a lot of different names to access the same environment.  In my experience we do not use the server names in AAM&#8217;s.  What I would recommend is calling your web service using the <a href="http://enet" rel="nofollow">http://enet</a> AAM that you have setup as the default. </p>
<p>To test whether or not you have the AAM&#8217;s setup correctly, open the site up using the hostname of the URL that you want to run the web service queries to and then use some of the admin functions, like adding users to the site, etc&#8230; if any of those fail it is likely due to having an incorrect AAM setup.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by david</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-4747</link>
		<dc:creator>david</dc:creator>
		<pubDate>Thu, 13 Oct 2011 19:49:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-4747</guid>
		<description>hello,
we have 2 app servers and 2 WFE, it seems to be working fine when we switch to the F5 environment using both servers, but when i try to access a webservice wihitn the servers ex: http://f5server/_vti_bin/getuserprofile.asmx it just doesn&#039;t work. is says unautorized access. 
any thoughts?
i have the f5 environment added to the AAM as an extranet. i dont know if i need to add both of the WFE servers on the Zone, please advise
i read in another post that it could be possbly to the loopback feature but i&#039;ve already added the hosts to the registry BackConnectionHostNames,
these are my AAM configuration:
Internal URL Zone Public URL for Zone
http://enet Default	http://enet
http://WFEServer2 Intranet	http://WFEServer2
http://enet2010 Internet	http://enet2010
http://enetf5 Extranet	http://enetf5

any help would be appreciated. thanks</description>
		<content:encoded><![CDATA[<p>hello,<br />
we have 2 app servers and 2 WFE, it seems to be working fine when we switch to the F5 environment using both servers, but when i try to access a webservice wihitn the servers ex: <a href="http://f5server/_vti_bin/getuserprofile.asmx" rel="nofollow">http://f5server/_vti_bin/getuserprofile.asmx</a> it just doesn&#8217;t work. is says unautorized access.<br />
any thoughts?<br />
i have the f5 environment added to the AAM as an extranet. i dont know if i need to add both of the WFE servers on the Zone, please advise<br />
i read in another post that it could be possbly to the loopback feature but i&#8217;ve already added the hosts to the registry BackConnectionHostNames,<br />
these are my AAM configuration:<br />
Internal URL Zone Public URL for Zone<br />
<a href="http://enet" rel="nofollow">http://enet</a> Default	<a href="http://enet" rel="nofollow">http://enet</a><br />
<a href="http://WFEServer2" rel="nofollow">http://WFEServer2</a> Intranet	<a href="http://WFEServer2" rel="nofollow">http://WFEServer2</a><br />
<a href="http://enet2010" rel="nofollow">http://enet2010</a> Internet	<a href="http://enet2010" rel="nofollow">http://enet2010</a><br />
<a href="http://enetf5" rel="nofollow">http://enetf5</a> Extranet	<a href="http://enetf5" rel="nofollow">http://enetf5</a></p>
<p>any help would be appreciated. thanks</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on SharePoint 2010, NTLM and BIG-IP Health Monitors by Zachary Loeber</title>
		<link>http://www.TheF5Guy.com/blog/2010/08/sharepoint-2010-ntlm-and-big-ip-health-monitors/comment-page-1/#comment-4660</link>
		<dc:creator>Zachary Loeber</dc:creator>
		<pubDate>Tue, 13 Sep 2011 00:14:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1070#comment-4660</guid>
		<description>Sorry, I realized I never rounded back with you about this.

The issue is that what you posted has the IP variable being assigned twice:
IP=`echo ${1} &#124; sed &#039;s/::ffff://&#039;`
IP=${1}

I updated the code and reposted it (with a link back to your site of course). I expanded upon it a bit as well, http://www.the-little-things.net/blog/2011/01/21/big-ip-sharepoint-2010-monitor/

Thanks again for the initial script.</description>
		<content:encoded><![CDATA[<p>Sorry, I realized I never rounded back with you about this.</p>
<p>The issue is that what you posted has the IP variable being assigned twice:<br />
IP=`echo ${1} | sed &#8216;s/::ffff://&#8217;`<br />
IP=${1}</p>
<p>I updated the code and reposted it (with a link back to your site of course). I expanded upon it a bit as well, <a href="http://www.the-little-things.net/blog/2011/01/21/big-ip-sharepoint-2010-monitor/" rel="nofollow">http://www.the-little-things.net/blog/2011/01/21/big-ip-sharepoint-2010-monitor/</a></p>
<p>Thanks again for the initial script.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Citrix XenApp 5.0, BIG-IP and X-Forwarded-For by CarlB</title>
		<link>http://www.TheF5Guy.com/blog/2010/02/citrix-xenapp-5-0-bigip-x-forwarded-for/comment-page-1/#comment-4612</link>
		<dc:creator>CarlB</dc:creator>
		<pubDate>Mon, 22 Aug 2011 14:26:31 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=846#comment-4612</guid>
		<description>I used the Xenapp 5.0 DG and did not care for sending thedomain user&#039;s password in plaintext to the XML broker, so I figured out what the WI would send to the XML broker and used that.  In the config I had, the password was replaced with SID.  
The full writeup is on DevCentral -http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/44/aft/1177084/showtab/groupforums/Default.aspx</description>
		<content:encoded><![CDATA[<p>I used the Xenapp 5.0 DG and did not care for sending thedomain user&#8217;s password in plaintext to the XML broker, so I figured out what the WI would send to the XML broker and used that.  In the config I had, the password was replaced with SID.<br />
The full writeup is on DevCentral -http://devcentral.f5.com/Community/GroupDetails/tabid/1082223/asg/44/aft/1177084/showtab/groupforums/Default.aspx</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on UAG SSTP VPN &#8211; RPC Packets Being Dropped by Keith</title>
		<link>http://www.TheF5Guy.com/blog/2011/06/uag-sstp-vpn-rpc-packets-being-dropped/comment-page-1/#comment-4598</link>
		<dc:creator>Keith</dc:creator>
		<pubDate>Wed, 03 Aug 2011 17:50:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1269#comment-4598</guid>
		<description>You FIxed it!</description>
		<content:encoded><![CDATA[<p>You FIxed it!</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on F5 Networks Certification by Kevin</title>
		<link>http://www.TheF5Guy.com/blog/2009/08/f5-networks-certification/comment-page-1/#comment-4576</link>
		<dc:creator>Kevin</dc:creator>
		<pubDate>Thu, 21 Jul 2011 19:27:46 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=338#comment-4576</guid>
		<description>Just a quick note:

I&#039;ve always been a personal advocate of certification... it really drives a deeper understanding of the technology.  It&#039;s not a replacement for experience, and having experience validates your certification.  It also shows individual initiative.  There are plenty of fish in the IT sea, and it&#039;s in your best interests to do everything possible to separate yourself from the pack.

My personal experience with F5 certification:

Recently, we made the decision to relocate.  That meant hitting the job market.  As a network engineer at a very large enterprise, I worked daily with the BIG IP platform (gtm and ltm).  During that time, I made the decision to leverage that experience and certify.  With a good bit additional reading and being blessed with access to hardware (LTM VE makes this easier now), I passed the BIG IP Product Consultant exam fairly easily.

So I interviewed for Network Engineering positions with 3 very different organizations, and surprisingly, all 3 were interested in one thing:  my F5 expertise.  I&#039;m not saying that the certification is the reason I was interviewed and ultimately hired, but it was certainly noticed and discussed at all 3 organizations (which range from pioneering online retail &amp; cloud services to local government and the entertainment industry).  Very diverse applications, very pointed need for engineers versed in F5.

At the end of the day, why not certify?  What reason is there not to expand your resume and learn in the process?</description>
		<content:encoded><![CDATA[<p>Just a quick note:</p>
<p>I&#8217;ve always been a personal advocate of certification&#8230; it really drives a deeper understanding of the technology.  It&#8217;s not a replacement for experience, and having experience validates your certification.  It also shows individual initiative.  There are plenty of fish in the IT sea, and it&#8217;s in your best interests to do everything possible to separate yourself from the pack.</p>
<p>My personal experience with F5 certification:</p>
<p>Recently, we made the decision to relocate.  That meant hitting the job market.  As a network engineer at a very large enterprise, I worked daily with the BIG IP platform (gtm and ltm).  During that time, I made the decision to leverage that experience and certify.  With a good bit additional reading and being blessed with access to hardware (LTM VE makes this easier now), I passed the BIG IP Product Consultant exam fairly easily.</p>
<p>So I interviewed for Network Engineering positions with 3 very different organizations, and surprisingly, all 3 were interested in one thing:  my F5 expertise.  I&#8217;m not saying that the certification is the reason I was interviewed and ultimately hired, but it was certainly noticed and discussed at all 3 organizations (which range from pioneering online retail &amp; cloud services to local government and the entertainment industry).  Very diverse applications, very pointed need for engineers versed in F5.</p>
<p>At the end of the day, why not certify?  What reason is there not to expand your resume and learn in the process?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by Veronica Rodríguez</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-4539</link>
		<dc:creator>Veronica Rodríguez</dc:creator>
		<pubDate>Wed, 06 Jul 2011 20:50:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-4539</guid>
		<description>Hola Tngo una granja de 3 Front Ends, 1 SQL y un servidor de index, se balancea con F5 pero tenemos el problema de que cada que entramos a alguna página se tarda mucho en responder (alrededor de 3 a 4 minutos) cuando en la small farma original no tardaba nada.
Los FE son virtuales al igual que SQL.
Tambien nos pasa que al estar trabajando en la página y darle refresh, aparece el mensaje de \Internet explorer no puede encontrar la página\, los chicos del F5 proporcionaron logs y se muestra como pareciera que mientras buscar cual FE le responda, encuentra uno apagado y se sigue al siguiente, hasta que de nuevo los encuentra como prendidos y es como responde la aplicación, mi pregunta es: El comportamiento es del balanceador? como puedo resolverlo?
Gracias de antemano.</description>
		<content:encoded><![CDATA[<p>Hola Tngo una granja de 3 Front Ends, 1 SQL y un servidor de index, se balancea con F5 pero tenemos el problema de que cada que entramos a alguna página se tarda mucho en responder (alrededor de 3 a 4 minutos) cuando en la small farma original no tardaba nada.<br />
Los FE son virtuales al igual que SQL.<br />
Tambien nos pasa que al estar trabajando en la página y darle refresh, aparece el mensaje de \Internet explorer no puede encontrar la página\, los chicos del F5 proporcionaron logs y se muestra como pareciera que mientras buscar cual FE le responda, encuentra uno apagado y se sigue al siguiente, hasta que de nuevo los encuentra como prendidos y es como responde la aplicación, mi pregunta es: El comportamiento es del balanceador? como puedo resolverlo?<br />
Gracias de antemano.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Direct Access &#8211; Corrupt NRPT Fix by Geir Sørensen</title>
		<link>http://www.TheF5Guy.com/blog/2010/12/direct-access-corrupt-nrpt-fix/comment-page-1/#comment-4511</link>
		<dc:creator>Geir Sørensen</dc:creator>
		<pubDate>Wed, 29 Jun 2011 13:21:13 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1134#comment-4511</guid>
		<description>You saved a lot of working hours for me with this posting. Thanks a lot! It worked like a charm, even though I had to use the help of colleagues to get the reg-file via mail to my smartphone and then mount it on my netless laptop as a usb drive :-)</description>
		<content:encoded><![CDATA[<p>You saved a lot of working hours for me with this posting. Thanks a lot! It worked like a charm, even though I had to use the help of colleagues to get the reg-file via mail to my smartphone and then mount it on my netless laptop as a usb drive <img src='http://www.TheF5Guy.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on F5 BIG-IP And Umbraco &#8211; Best Practices by Colin</title>
		<link>http://www.TheF5Guy.com/blog/2011/06/f5-big-ip-and-umbraco-best-practices/comment-page-1/#comment-4504</link>
		<dc:creator>Colin</dc:creator>
		<pubDate>Mon, 27 Jun 2011 20:34:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1287#comment-4504</guid>
		<description>Very cool. :) 

If you want to send both URIs to the same place you could also do it like so:

when HTTP_REQUEST {
  switch -glob [string tolower [HTTP::uri]] {
    &quot;*umbdebug*&quot;-
    &quot;*umbraco*&quot; {
      HTTP::redirect &quot;https://mycompany.com/default.aspx&quot;
    }
  }
}


Might even save you a few cycles. ;)

Awesome stuff man, keep it coming!

#Colin</description>
		<content:encoded><![CDATA[<p>Very cool. <img src='http://www.TheF5Guy.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  </p>
<p>If you want to send both URIs to the same place you could also do it like so:</p>
<p>when HTTP_REQUEST {<br />
  switch -glob [string tolower [HTTP::uri]] {<br />
    &#8220;*umbdebug*&#8221;-<br />
    &#8220;*umbraco*&#8221; {<br />
      HTTP::redirect &#8220;https://mycompany.com/default.aspx&#8221;<br />
    }<br />
  }<br />
}</p>
<p>Might even save you a few cycles. <img src='http://www.TheF5Guy.com/blog/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>Awesome stuff man, keep it coming!</p>
<p>#Colin</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on f5 Networks &#8211; 2011 MVP Member!!! by nami</title>
		<link>http://www.TheF5Guy.com/blog/2011/04/f5-networks-2011-mvp-member/comment-page-1/#comment-4311</link>
		<dc:creator>nami</dc:creator>
		<pubDate>Fri, 13 May 2011 09:57:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1201#comment-4311</guid>
		<description>yeah,congratulations , from china :)</description>
		<content:encoded><![CDATA[<p>yeah,congratulations , from china <img src='http://www.TheF5Guy.com/blog/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on F5 BIG-IP ASM &#8211; Web Scraping Protection by Christian</title>
		<link>http://www.TheF5Guy.com/blog/2010/12/f5-big-ip-asm-web-scraping-protection/comment-page-1/#comment-4305</link>
		<dc:creator>Christian</dc:creator>
		<pubDate>Tue, 10 May 2011 18:21:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1151#comment-4305</guid>
		<description>Hi, thanks for this article. I&#039;d like to talk more in depth with you about it. If you have a minute, I&#039;d appreciate if you could mail me.</description>
		<content:encoded><![CDATA[<p>Hi, thanks for this article. I&#8217;d like to talk more in depth with you about it. If you have a minute, I&#8217;d appreciate if you could mail me.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by naladar</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-4265</link>
		<dc:creator>naladar</dc:creator>
		<pubDate>Mon, 02 May 2011 18:45:23 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-4265</guid>
		<description>That is correct Ed.</description>
		<content:encoded><![CDATA[<p>That is correct Ed.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by Ed</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-4166</link>
		<dc:creator>Ed</dc:creator>
		<pubDate>Wed, 20 Apr 2011 15:54:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-4166</guid>
		<description>Hi Naladar,
Thank you.  If I understand correctly, you solved for this by simply using a VIP that was protected by SiteMinder.  Was the extended site set up to use WinAuth/NTLM ?

Thanks again,
Ed</description>
		<content:encoded><![CDATA[<p>Hi Naladar,<br />
Thank you.  If I understand correctly, you solved for this by simply using a VIP that was protected by SiteMinder.  Was the extended site set up to use WinAuth/NTLM ?</p>
<p>Thanks again,<br />
Ed</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on SharePoint 2010, NTLM and BIG-IP Health Monitors by naladar</title>
		<link>http://www.TheF5Guy.com/blog/2010/08/sharepoint-2010-ntlm-and-big-ip-health-monitors/comment-page-1/#comment-4126</link>
		<dc:creator>naladar</dc:creator>
		<pubDate>Thu, 14 Apr 2011 20:21:17 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1070#comment-4126</guid>
		<description>Thanks for the heads up Zachary.  Using this code in production though and not having any real problems with it just yet.  Would you mind e-mailing me and letting me know what part in particular that is not working for you?</description>
		<content:encoded><![CDATA[<p>Thanks for the heads up Zachary.  Using this code in production though and not having any real problems with it just yet.  Would you mind e-mailing me and letting me know what part in particular that is not working for you?</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by naladar</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-4124</link>
		<dc:creator>naladar</dc:creator>
		<pubDate>Thu, 14 Apr 2011 20:17:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-4124</guid>
		<description>Hello Ed,

The way we have it set up is if you are coming into the network from an external network is that it will go to a VIP and the application is protected by siteminder.  If you are on the internal network, an internal DNS mapping will take you over to a different VIP that is aimed at the extended web application that is not protected by siteminder.

We also created an iRule for the externally facing VIP that looked for the user-agent string.  When it saw that the user agent string was that of an Office 2010 application it would forward the traffic over to the extended web application that was not protected by siteminder.  That way people using Word and Excel could post documents and download documents to the web site with out having log into siteminder each time and/or get blocked by siteminder.</description>
		<content:encoded><![CDATA[<p>Hello Ed,</p>
<p>The way we have it set up is if you are coming into the network from an external network is that it will go to a VIP and the application is protected by siteminder.  If you are on the internal network, an internal DNS mapping will take you over to a different VIP that is aimed at the extended web application that is not protected by siteminder.</p>
<p>We also created an iRule for the externally facing VIP that looked for the user-agent string.  When it saw that the user agent string was that of an Office 2010 application it would forward the traffic over to the extended web application that was not protected by siteminder.  That way people using Word and Excel could post documents and download documents to the web site with out having log into siteminder each time and/or get blocked by siteminder.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on MOSS 2007 Alternate Access Mappings and BIG-IP by Ed</title>
		<link>http://www.TheF5Guy.com/blog/2009/06/moss-2007-alternate-access-mappings-and-big-ip/comment-page-1/#comment-4077</link>
		<dc:creator>Ed</dc:creator>
		<pubDate>Fri, 08 Apr 2011 19:32:08 +0000</pubDate>
		<guid isPermaLink="false">http://www.Thef5Guy.com/?p=253#comment-4077</guid>
		<description>Hi,
If you don&#039;t mind, I really need to understand how you did this: Siteminder authentication is done on the externally accessible VIP and regular Windows authentication is done over the internal VIP pointing to that web application.

We are trying to use sharepoint for a mobile app, and must use Siteminder in external connection scenarios.  Can you share the details.  I&#039;ve only seen an ISS hack (aka modle) on the web that enables this functional gateway.

Noce site!  Thanks.</description>
		<content:encoded><![CDATA[<p>Hi,<br />
If you don&#8217;t mind, I really need to understand how you did this: Siteminder authentication is done on the externally accessible VIP and regular Windows authentication is done over the internal VIP pointing to that web application.</p>
<p>We are trying to use sharepoint for a mobile app, and must use Siteminder in external connection scenarios.  Can you share the details.  I&#8217;ve only seen an ISS hack (aka modle) on the web that enables this functional gateway.</p>
<p>Noce site!  Thanks.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on f5 Networks &#8211; 2011 MVP Member!!! by Jason</title>
		<link>http://www.TheF5Guy.com/blog/2011/04/f5-networks-2011-mvp-member/comment-page-1/#comment-4064</link>
		<dc:creator>Jason</dc:creator>
		<pubDate>Tue, 05 Apr 2011 17:03:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1201#comment-4064</guid>
		<description>same here, F5guy.  Couldn&#039;t be happier that you&#039;re involved.</description>
		<content:encoded><![CDATA[<p>same here, F5guy.  Couldn&#8217;t be happier that you&#8217;re involved.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on f5 Networks &#8211; 2011 MVP Member!!! by Colin</title>
		<link>http://www.TheF5Guy.com/blog/2011/04/f5-networks-2011-mvp-member/comment-page-1/#comment-4056</link>
		<dc:creator>Colin</dc:creator>
		<pubDate>Mon, 04 Apr 2011 16:15:33 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1201#comment-4056</guid>
		<description>I&#039;m glad you&#039;re pleased man, thanks again for all the awesome contributions. Keep it up and we&#039;ll keep on coming up with new, more awesomer boxes to send out every year. ;)

#Colin</description>
		<content:encoded><![CDATA[<p>I&#8217;m glad you&#8217;re pleased man, thanks again for all the awesome contributions. Keep it up and we&#8217;ll keep on coming up with new, more awesomer boxes to send out every year. <img src='http://www.TheF5Guy.com/blog/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>#Colin</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Direct Access &#8211; Corrupt NRPT Fix by TheF5Guy</title>
		<link>http://www.TheF5Guy.com/blog/2010/12/direct-access-corrupt-nrpt-fix/comment-page-1/#comment-4024</link>
		<dc:creator>TheF5Guy</dc:creator>
		<pubDate>Wed, 30 Mar 2011 21:40:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.TheF5Guy.com/blog/?p=1134#comment-4024</guid>
		<description>Thanks for the tip Andrew Fidel.  I have noticed in doing that though that it causes the DirectAccess Connectivity Assistant to appear as though DA functionality is not working.  You could also reset the DA Connectivity Assistant service, find the dcatray.exe file and run it to get the DA Assistant going again, but the reboot does all of that. 

The reboot also has the side effect of clearing out any stored DNS entries that may cause issues with DA or the DA Connectivity Assistant from working properly.</description>
		<content:encoded><![CDATA[<p>Thanks for the tip Andrew Fidel.  I have noticed in doing that though that it causes the DirectAccess Connectivity Assistant to appear as though DA functionality is not working.  You could also reset the DA Connectivity Assistant service, find the dcatray.exe file and run it to get the DA Assistant going again, but the reboot does all of that. </p>
<p>The reboot also has the side effect of clearing out any stored DNS entries that may cause issues with DA or the DA Connectivity Assistant from working properly.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

