- Pulse Secure Community
- :
- About bjarke.emborg.kragelund
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
05-21-2013
10-30-2017
bjarke.emborg.k
Contributor
22
Posts
4
Kudos
2
Solutions
02-25-2015
01:40:AM
Hi MBEHR, Try to take a look at this guide: Virtual Hosting FTP services Best regards Bjarke Emborg Kragelund
... View more
02-04-2015
05:04:AM
Hi Aiden, Did not mean to double-post... just re-visiting our 2012 RDS setup, and was hoping to be able to tunnel directly from the MS TS Client - without a tailored .rdp. I am not able to do this, and a totally forgot the answer above, wich explains it. SRY! I will go away now :-) Best regards Bjarke Emborg Kragelund
... View more
01-28-2015
12:45:PM
Hi Dhinesh, I am afraid that the AWS/EC2-setup is not something I have any experience with. Have you tried to enter your EC2 credentials as sugested? What happens? Try to take a look at this guide : SteelApp for Application Delivery Control & Scalability | SteelApp for AWS deployments | Riverbed Best regards Bjarke Emborg Kragelund
... View more
01-25-2015
11:36:PM
Hi Dhinesh, You question 1) and 2) are very much tied together :-) The flow in the STM is Traffic IP Group <-> Virtual Server <-> Pool, so you need a Traffic Group. Try to add an additional IP to your STM via 'Services' | 'Traffic IP Groups'. (I believe it is possible to use the administrative IP of the STM for a VS, but for clarity I do not recommend it) To start things off simple, choose an IP on the same IF (eth0?) and the same subnet as the STM administrative IP. That way you can make sure - or almost sure - that IP traffic will actually flow. Next you assign you VS to that exact TG. 'Services' | 'Virtual Servers' - choose your VS. Go to 'Listening on:' - choose 'Traffic IP Groups' - choose the Traffic IP Group you just created. You should now be able to access the service hosted on the pool servers via the STM Traffic Group. Best regards Bjarke Emborg Kragekund
... View more
01-22-2015
11:19:PM
Hi Dhinesh, What you are asking is more or less what the STM was 'born' to do. You will have no problem achieving this. Perhaps starting with this document will get you underway: Getting Started - Load-balancing to a website using Stingray Traffic Manager Then later on, perhaps this will help (allthough not addressing your exact question): Managing consistent caches across a Stingray Cluster Best regards Bjarke Emborg Kragelund
... View more
11-26-2014
02:29:AM
1 Kudo
Hi Martin, You might want to take a look at these examples : HowTo: Inspect HTTP request parameters Specifically these variables : $rawurl = http.getRawURL(); # returns '/search?hl=en&q=ZXTM&btnG=Google+Search' $path = http.getPath(); # returns '/search' $querystr = http.getQueryString(); # returns 'hl=en&q=ZXTM&btnG=Google+Search' Best regards Bjarke
... View more
08-28-2014
05:11:AM
Hello, We would like to achieve the following : multihead.domain.tld = Traffic IP Group / VIP Above VIP takes traffic from both - www.domain.tld - somethingelse.domain.tld ... and sends to same VS. Pool = node01.domain.local:80, node02.domain.local:80 If somethingelse.domain.tld does not answer with i.e. a regex on node01.domain.local - or similar monitor, we would like to stop traffic to that node - but only for the site somethingelse.domain.tld. Not for www.domain.tld, which should continue to use both nodes. How could one achieve such a setup? Aware that we can make additional pools per trafficgroup / VS, is that the way to go instead? Best regards Bjarke Emborg Kragelund
... View more
08-25-2014
02:00:AM
1 Kudo
Here's my problem : http://social.technet.microsoft.com/Forums/windowsserver/en-US/593f6b83-29af-4735-b05d-a6166a9c9c0f/2012-rd-connection-broker-member-connections-missing-farm-name?forum=winserverTS After adding the farm name in the .rdp-file LoadBalanceInfo:s:tsv://vmresource.1.ts.domain.public I have been able to reconnect to the samme session 10 times in a row from different IP's, and that is good enough for me :-) Thanks Bjarke Emborg Kragelund
... View more
08-25-2014
01:45:AM
Hello, It seems that the RDS 2012 R2 needs to have the farm name specified in its .rdp-file. "RD Connection Broker failed to process the connection request for user [Domain]\[Logon]. Farm name specified in user's RDP file (hints) could not be found. Error: The farm specified for the connection is not present." If I have understood correctly. So users - not using a .rdp-file created by us, with ther farm name - will not be able to hit their current sessions? For instance when they connect from a public PC etc. Am I on the right track or? Best Regards Bjarke Emborg Kragelund
... View more
08-24-2014
11:45:PM
Hi Aiden, I am afraid I am not skilled enough for that. Could you throw me a bone more? Best regards Bjarke Emborg Kragelund
... View more
08-22-2014
07:35:AM
Hope so. But not sure. We have had a consultant to set this up for us, as the RDS 2008 vs. RDS 2012 R2, was just too much of a difference for us. Initlially. I have tried to convert the 2008 naming convention to the 2012 R2 ditto.That can well be the reason for it not working :-P The local group in RDS 2008 is called 'Session Directory Computers'. In 2012 R2 it is done strictly via AD GPO / Local GPO... or am I mistaken? The page you link to is for Windows Sever 2008. Thx! Bjarke Emborg Kragelund
... View more
08-22-2014
02:05:AM
Hi Aidan et al, We have a similar quest. We have done the following. 3 x RDS (ts01.domain.local, ts02.domain.local, ts03.domain.local) 1 x MS Gateway / Session Broker (tslb.domain.local) 1 x VIP on SteelApp with DNS ts.domain.public 1 x VS on SteelApp - tcp/3389 Generic client First (with TrafficScript from above - added the persistence class) 1 x Pool on SteelpApp - persistence class 'ts.domain.local' (ts01.domain.local:3389, ts02.domain.local:3389, ...) When RDP'ing to ts.domain.public it all works great. So the basics should be covered. However, we do not reconnect to existing sessions in the pool. What could I be missing? How should I troubleshoot further? Best regards Bjarke Emborg Kragelund
... View more
05-13-2014
01:04:AM
Hi Markus, Previously I have - with success - used gparted live to extend the /-partition after I have extended the disk in VMware. Practice on a clone first. Best regards Bjarke
... View more
04-29-2014
12:03:AM
Aaaaaeh, so it is a scheduled alert - got aware when I tonight received a mail alert from the STM with 50 alerts. Everything is working... just not as I was expecting :-) Best regards Bjarke Emborg Kragelund
... View more
04-28-2014
05:33:AM
Hello everybody, Trying to get our STM to send mail-alerts on the Event Type : SSL Certificate Expiry. Under System | Alerting, I add the 'SSL Certificate Expiry' as 'Event Type' and Create an 'Action' which sends a mail. from: stingray@[domain.tld] - a dummy-e-mail address. to: [myname]@[domain.tld] - my real e-mail. server: smtp.domain.tld:[port] - i.e. smtp.localdomain.ds:66555 However after an 'Update', and 'Update and Test' I do not recieve any e-mail. I have read that in previous versions you should start postfix in order to do this, but the command listed - 'svcadm' does not work on my VA. Furthermore I have SSH to the Stingray and sent a mail via CLI in order to rule out firewalls and anything else. Does anyone have a pointer for me? Best regards Bjarke Emborg Kragelund
... View more
04-01-2014
01:31:AM
Hi Kevin, Sounds to me that the application on the IIS is not 100% stateless and would need an affinity / persistence rule to work properly. Try to make a rule which is set to 'IP-based persistence'. You can find the rules under : Catalogs | Persistence Then add that rule to your Traffic Pool ( Services | Pools | <PoolName> | Session Persistence ), and see what happens? Best regards Bjarke Emborg Kragelund
... View more
03-17-2014
04:55:AM
Hello, Not to be rude or anything, but make sure the Key and Cert are in PEM-format. Brgds. Bjarke Emborg Kragelund
... View more
02-26-2014
12:47:PM
Hi Ryan, How is your VS configured protocol wise? I ( usually ) do not need to rewrite anything when offloading SSL with the STM. Our VS's, when used as http -> https + offloading SSL on the STM in front of a vanilla http pool is something like : Internal Protocol : HTTP Port : 443 SSL Decryption ssl_decrypt : yes ... and then choose an appropiate matching certificate. No other rules needed. Or what could I be missing? Our SharePoint 2010 / 2013 however needs a little magic via a TrafficScript response rule : $host = http.getHostHeader ( ) ; $mime = http.getResponseHeader ( "Content-Type" ) ; if ( string.contains ( $mime , "html" ) || string.contains ( $mime , "xml" ) ) { $body = http.getResponseBody ( ) ; $source = " http:// " . $host ; $destination = " https:// " . $host ; $newbody = string.replaceAll ( $body , $source , $destination ) ; $source = "http:\\u002f\\u002f" . $host ; $destination = "https:\\u002f\\u002f" . $host ; $newbody = string.replaceAll ( $newbody , $source , $destination ) ; if ( $newbody != $body ) { http.setResponseBody ( $newbody ) ; } } Otherwise nothing other than vanilla settings. Best regards Bjarke
... View more
01-13-2014
08:20:AM
Think we got the same - patching tonight.
... View more
01-13-2014
12:55:AM
2 Kudos
Hi Stanley, Get you certificate ready in PEM-format - both the certificate and the private key. Then visit System | Security | SSL Certificate Certificate file : Private key file : Best Regards. Bjarke
... View more
12-11-2013
02:03:AM
Hi Nicolas et al, Thx for the above. The plot thickens a bit - If the 'new-site' is only listening on the header 'new-site.com' I need to rewrite the traffic towards the new pool as well. I will give it go, but if you have some code handy? Brgds. Bjarke
... View more
12-10-2013
02:42:AM
I have got the following task from the DEVs. - original DNS / URL ( example.com ) should be AS-IS. - example.com/new-site should be hosted by another pool. - example.com/everything-else should be AS-IS. More specific, the original site has IIS/ASP.Net on the backend. The new ( example.com/new-site ) is hosted on a LAMP / WordPress stack... and creating a subsite ( new-site.example.com ) is not preferred. Any way to achieve this? Brgds Bjarke Emborg Kragelund
... View more
Latest Tags
No tags yet
Kudos given to
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
