I have installed Exchange 2010 with Mailbox and Client Access Server Role.
For reverse proxy, I have configured Windows 2012 r2 IIS 8.5 ARR 2.5.
Although I am able to connect Outlook Web App using ARR without SSL, no luck if publish Outlook Web App with SSL got error 502.3 bad gateway security error
I already tried think link aswell http://forums.iis.net/t/1176747.aspx but no changes
And for Your information, i used this link for installing iis arr http://blogs.technet.com/b/exchange/archive/2013/07/19/reverse-proxy-for-exchange-server-2013-using-iis-arr-part-1.aspx
Error from log Failed Tracing Request
<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type='text/xsl' href='freb.xsl'?>
<!-- saved from url=(0014)about:internet -->
<failedRequest url="https://mail.contoso.com:443/owa"
siteId="1"
appPoolId="DefaultAppPool"
processId="2192"
verb="GET"
remoteUserName=""
userName=""
tokenUserName="NT AUTHORITY\IUSR"
authenticationType="anonymous"
activityId="{8000009A-0000-F300-B63F-84710C7967BB}"
failureReason="STATUS_CODE"
statusCode="502.3"
triggerStatusCode="502.3"
timeTaken="62"
xmlns:freb="http://schemas.microsoft.com/win/2006/06/iis/freb"
>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>0</Level>
<Opcode>1</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="SiteId">1</Data>
<Data Name="AppPoolId">DefaultAppPool</Data>
<Data Name="ConnId">1610612888</Data>
<Data Name="RawConnId">0</Data>
<Data Name="RequestURL">https://mail.contoso.com:443/owa</Data>
<Data Name="RequestVerb">GET</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>GENERAL_REQUEST_START</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>1</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="RequestURL">/owa</Data>
<Data Name="Scope">0</Data>
<Data Name="Type">0</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>URL_REWRITE_START</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
<freb:Description Data="Scope">Global</freb:Description>
<freb:Description Data="Type">Inbound</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>3</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="RuleName">ARR_mail.contoso.com_loadbalance_SSL</Data>
<Data Name="RequestURL">owa</Data>
<Data Name="QueryString"></Data>
<Data Name="PatternSyntax">1</Data>
<Data Name="StopProcessing">true</Data>
<Data Name="RelativePath">/</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>RULE_EVALUATION_START</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
<freb:Description Data="PatternSyntax">Wildcard</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>10</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="Pattern">*</Data>
<Data Name="Input">owa</Data>
<Data Name="Negate">false</Data>
<Data Name="Matched">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>PATTERN_MATCH</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>5</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="LogicalGrouping">0</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>CONDITIONS_EVALUATION_START</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
<freb:Description Data="LogicalGrouping">MatchAll</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>11</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="Input">{HTTPS}</Data>
<Data Name="ExpandedInput">on</Data>
<Data Name="MatchType">0</Data>
<Data Name="Pattern">on</Data>
<Data Name="Negate">false</Data>
<Data Name="Succeeded">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>CONDITION_EVALUATION</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
<freb:Description Data="MatchType">Pattern</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>6</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="Succeeded">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>CONDITIONS_EVALUATION_END</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>12</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="Substitution">https://mail.contoso.com/{R:0}</Data>
<Data Name="RewriteURL">https://mail.contoso.com/owa</Data>
<Data Name="AppendQueryString">true</Data>
<Data Name="LogRewrittenURL">false</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>REWRITE_ACTION</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>4</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="RuleName">ARR_contoso.com_loadbalance_SSL</Data>
<Data Name="RequestURL">https://contoso.com/owa</Data>
<Data Name="QueryString"></Data>
<Data Name="StopProcessing">true</Data>
<Data Name="Succeeded">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>RULE_EVALUATION_END</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>53</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="HeaderName">X-Original-URL</Data>
<Data Name="HeaderValue">/owa</Data>
<Data Name="Replace">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>GENERAL_SET_REQUEST_HEADER</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>42</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="OldUrl">/owa</Data>
<Data Name="NewUrl">https://mail.contoso.com/owa</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>URL_CHANGED</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>2</Opcode>
<Keywords>0x400</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="RequestURL">https://mail.contoso.com/owa</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>URL_REWRITE_END</Opcode>
<Keywords>
<Keyword>Rewrite</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{0469ABFA-1BB2-466A-B645-E3E15A02F38B}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>53</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="HeaderName">AspFilterSessionId</Data>
<Data Name="HeaderValue"></Data>
<Data Name="Replace">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>GENERAL_SET_REQUEST_HEADER</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>55</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="RemoteAddress">x.x.x.x</Data>
<Data Name="RemotePort">50337</Data>
<Data Name="LocalAddress">x.x.x.x</Data>
<Data Name="LocalPort">443</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>GENERAL_ENDPOINT_INFORMATION</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>50</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="Headers">Connection: Keep-Alive
Accept: text/html, application/xhtml+xml, */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US
Host: mail.contoso.com
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; Trident/7.0; rv:11.0) like Gecko
X-Original-URL: /owa
</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>GENERAL_REQUEST_HEADERS</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>30</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="PhysicalPath"></Data>
<Data Name="AccessPerms">513</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>GENERAL_GET_URL_METADATA</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>10</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="AuthTypeSupported">2</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_START</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
<freb:Description Data="AuthTypeSupported">Basic</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>28</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_END</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event>
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>10</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="AuthTypeSupported">4</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_START</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
<freb:Description Data="AuthTypeSupported">NT</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>28</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_END</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>10</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="AuthTypeSupported">128</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_START</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
<freb:Description Data="AuthTypeSupported">MapCliCert</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>28</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_END</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>10</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="AuthTypeSupported">1</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_START</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
<freb:Description Data="AuthTypeSupported">Anonymous</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>11</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="AuthType">4</Data>
<Data Name="NTLMUsed">false</Data>
<Data Name="RemoteUserName"></Data>
<Data Name="AuthUserName"></Data>
<Data Name="TokenImpersonationLevel">2</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_SUCCEEDED</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
<freb:Description Data="AuthType">NT</freb:Description>
<freb:Description Data="TokenImpersonationLevel">ImpersonationImpersonate</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>44</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="AuthType"></Data>
<Data Name="UserName"></Data>
<Data Name="SupportsIsInRole">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>USER_SET</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>28</Opcode>
<Keywords>0x2</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>AUTH_END</Opcode>
<Keywords>
<Keyword>Authentication</Keyword>
</Keywords>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{C33BBE8F-985B-4080-81E6-005F1A06B9E2}</EventGuid>
</ExtendedTracingInfo>
</Event><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>1</Opcode>
<Keywords>0x800</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="WebFarm">mail.contoso.com</Data>
<Data Name="Algorithm">1</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>ARR_WEBFARM_ROUTED</Opcode>
<Keywords>
<Keyword>RequestRouting</Keyword>
</Keywords>
<freb:Description Data="Algorithm">LeastRequests</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{53AE50FA-81DF-47B1-8161-71F0A1C55A48}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>43</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="OldHandlerName"></Data>
<Data Name="NewHandlerName">ApplicationRequestRoutingHandler</Data>
<Data Name="NewHandlerModules">ApplicationRequestRouting</Data>
<Data Name="NewHandlerScriptProcessor"></Data>
<Data Name="NewHandlerType"></Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>HANDLER_CHANGED</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>4</Level>
<Opcode>2</Opcode>
<Keywords>0x800</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="RoutingReason">3</Data>
<Data Name="Server">192.168.14.2</Data>
<Data Name="State">0</Data>
<Data Name="TotalRequests">2</Data>
<Data Name="FailedRequests">1</Data>
<Data Name="CurrentRequests">1</Data>
<Data Name="BytesSent">0</Data>
<Data Name="BytesReceived">0</Data>
<Data Name="ResponseTime">0</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>ARR_SERVER_ROUTED</Opcode>
<Keywords>
<Keyword>RequestRouting</Keyword>
</Keywords>
<freb:Description Data="RoutingReason">LoadBalancing</freb:Description>
<freb:Description Data="State">Active</freb:Description>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{53AE50FA-81DF-47B1-8161-71F0A1C55A48}</EventGuid>
</ExtendedTracingInfo>
</Event><Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="WWW Server" Guid="{3A2A4E84-4C21-4981-AE10-3FDA0D9B0F83}"/>
<EventID>0</EventID>
<Version>1</Version>
<Level>5</Level>
<Opcode>53</Opcode>
<Keywords>0x0</Keywords>
<TimeCreated SystemTime="2013-12-17T08:44:33.412Z"/>
<Correlation ActivityID="{8000009A-0000-F300-B63F-84710C7967BB}"/>
<Execution ProcessID="2192" ThreadID="3596"/>
<Computer>WIN-PIC95ND01LV</Computer>
</System>
<EventData>
<Data Name="ContextId">{8000009A-0000-F300-B63F-84710C7967BB}</Data>
<Data Name="HeaderName">Max-Forwards</Data>
<Data Name="HeaderValue">10</Data>
<Data Name="Replace">true</Data>
</EventData>
<RenderingInfo Culture="en-US">
<Opcode>GENERAL_SET_REQUEST_HEADER</Opcode>
</RenderingInfo>
<ExtendedTracingInfo xmlns="http://schemas.microsoft.com/win/2004/08/events/trace">
<EventGuid>{D42CF7EF-DE92-473E-8B6C-621EA663113A}</EventGuid>
</ExtendedTracingInfo>
</Event>