If you’re trying to put an application served on IIS (Sharepoint, ADFS Proxy) behind a Reverse Proxy you’ll often encounter issues with SSL Bridging. While the clientside connection works fine, the serverside connection gets a TCP RST from the back-end after SSL ClientHello.
Tag: f5
When troubleshooting an issue on any device where network connectivity is impacted, a packet capture is still king. This is not to say every 403 Forbidden error needs to be examined in Wireshark, but when a user reports their browsing saying the connection was reset or a timeout was hit, it might be time to fire up tcpdump.
Continue reading