We currently have 2 exchange 2010 client access servers (OWA external access is not configured), along with 2 MB, 2 HT and 2 Edge servers in our DMZ.
I'm setting up a connection to the Microsoft Federation Gateway in order to allow outlook free\busy sharing with a partner company.
According to this http://technet.microsoft.com/en-us/library/dd638083(v=exchg.141).aspx#FC it looks like they recommend 443 outbound from both CAS servers to the internet, and 443 inbound to 1 CAS server.
Can we instead use the CAS array VIP, or does it have to be the actual IP's of the CAS servers as above?
DQ