This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

ADFS Proxy - Load Balance Health Check

Question
0

Sign in to vote

Hello,

I am looking to know any insight into FortiADC - 2000F (fortinet) load balance health check for Active Directory Federation Proxy servers.

Tried the health check against /FederationMetadata/2007-06/FederationMetadata.xml without succes.

nilam

Thursday, March 8, 2018 6:58 PM

All replies

0

Sign in to vote
My guess is that your load balancer does not support SNI for the health probing (or it does and you have not enabled/configured it). This issue is described here: https://blogs.technet.microsoft.com/applicationproxyblog/2014/10/17/hardware-load-balancer-health-checks-and-web-application-proxy-ad-fs-2012-r2/

So basically you can use an HTTP endpoint for the sake of health probing to bypass the SNI requirement.
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
- Proposed as answer by Pierre Audonnet [MSFT]Microsoft employee Tuesday, March 13, 2018 12:53 PM
Friday, March 9, 2018 2:08 PM