-
Check if inbound traffic through TCP port 443 is enabled on:
-
the firewall between the Web Application Proxy server and the federation server farm.
-
the firewall between the clients and the Web Application Proxy server.
-
-
Check if inbound traffic through TCP port 49443 is enabled on the firewall between the clients and the Web Application Proxy server when the following conditions are true:
-
TLS client authentication using X.509 certificate is enabled.
-
You are using AD FS on Windows Server 2012 R2.
Note The configuration is not required on the firewall between the Web Application Proxy server and the federation servers.
-