How to Configure ActiveSync's IIS SSL Settings when using Client Certficate ESP on the LoadMaster

Scope

In certain scenarios or environments a client may be unable to send an email with an attachment from a mobile device. This usually occurs when the Edge Security Pack (ESP) is enabled with Client Certificates on the LoadMaster, but Client Certificates is also enabled on Microsoft IIS. In this scenario, Microsoft Exchange returns a 413 "Entity Too Large Error".

For further information, refer to the following Microsoft TechNet article:

https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/7e0d74d3-ca01-4d36-8ac7-6b2ca03fd383.mspx?mfr=true

Solution

Disable Client Certificates on IIS.

Configuration

Navigate to IIS Manger > Exchange > Microsoft-Server-Active-Sync >  SSL Settings >  Client certificates = Ignore > Apply