First off, not really sure this is the right place but hope someone can help!
We're running Exchange 2013 with 3 nodes, 1 DAG. Having trouble with our firewall: if we allow Node1 straight out, the client authenticates with TLS1.2 as expected. If we create a load-balanced object on the firewall and publish this (sort of reverse proxy), then TLS falls over. what seems to happen is that the client presents its suites, the server responds with TLS 1.2, then the client re-presents its cipher suites, the server responds with TLS 1.2, then the client presents a reduced set of suites, the server clocks back its security... you get the picture!
I'm not expecting anyone to fix this as it seems to be firewall issue, but does anyone know of any good resources about troubleshooting resources regarding cipher suites? I know I've mentioned Exchange, but it is essentially being fed through IIS so thought someone here might be able to help.