In part two of my series on publishing Exchange to the Internet using WAP (Web Application Proxy) we configure Active Directory for Kerberos Delegation, then publish the paths to Exchange using our WAP server.
Note that if you are doing this in a HA environment, the steps to enable Kerberos for your CAS array should be followed first, before then performing delegation for the HTTP name.
HTC desire X
Hi,
Am I correct in saying that your wap proxy is a domain joined server in your dmz? I don’t know any company that would allow this.
Thanks
Hiya,
Yes, it needs to be joined to the domain for kerberos delegation. This is no different to most TMG servers setup for pre-auth. You might not see this, but it’s quite common.
Steve