Citrix SD-WAN WANOP

RPC over HTTPS

Is it mandatory to create a service class to accelerate RPC over HTTPS connections?

Creating a new service class is an optional task. You can use an existing HTTPS service class. However, to create reports specifically for RPC over HTTPS connections, you must create a new service class and bind the SSL profile to it. If you do not want to create a service class for RPC over HTTPS connections, you can bind the SSL profile you have created to the Web (Private-Secure) service class.

I have not created any service class for the RPC over HTTPS applications. How will this affect the reporting of the RPC over HTTPS connections?

When you upgrade the appliance to release 7.3, the RPC over HTTPS applications that are created do not belong to any service class. As a result, all RPC over HTTPS connections are listed as the TCP Other connections in the reports. If you want to classify these connections as RPC over HTTPS connections, you must create a service class for these applications.

Is there a default service class for RPC over HTTPS on the appliance?

No. The appliance has only default applications, and not default service classes. You must create the service class for an application.

Does the appliance provide any SSL compression benefits to the RPC over HTTPS connections?

No. The appliance does not provide any SSL compression benefits to the RPC over HTTP connections. Compression benefits are available only for encryption and decryption of HTTPS traffic.

Similar to MAPI, does the appliance optimize latency for RPC over HTTPS connections?

No. The appliance does not optimize latency for RPC over HTTPS.

Is MAPI over HTTP different from RPC over HTTPS?

Yes. MAPI over HTTP is a new protocol supported on Microsoft Exchange Server 2013 SP1 or later.

What is the difference between RPC over HTTPS settings on client-side and server-side Citrix SD-WAN WANOP appliances?

Except for creating a service class and adding RPC over HTTPS applications to it, you do not need any additional configuration on a client-side Citrix SD-WAN WANOP appliance.

What happens if I configure the SSL profile in transparent proxy mode?

Some Exchange servers require TLS session ticket support. To accelerate connections to these servers, you need to create an SSL profile with split proxy, because transparent proxy mode does not support TLS session tickets.

If a load balancing setup is used for the Microsoft Exchange Server, which destination IP address should I add to the filter rule when creating an RPC over HTTPS service class?

If you are using a load balancing appliance, add its virtual IP (VIP) address to the filter rule when creating an RPC over HTTP service class.

How can I differentiate between the MAP and RPC over HTTPS traffic in the Outlook (MAPI) page?

You can differentiate the traffic based on applications shown on the Outlook (MAPI) page. For example, MAPI and RPC over HTTPS are used for the following applications:

  • MAPI: MAPI and eMAPI

  • RPC over HTTPS: HTTP MAPI, HTTP eMAPI, HTTPS MAPI, and HTTPS eMAPI

RPC over HTTPS