Welcome to ISAserver.org

RPC over HTTP through ISA

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Cache] >> Web Proxy client >> RPC over HTTP through ISA

Page: [1]

Message

<< Older Topic Newer Topic >>

RPC over HTTP through ISA - 4.May2007 8:33:12 AM

JeffVandervoort

Posts: 93
Joined: 20.Nov.2004
Status: offline

In this scenario, RPC over HTTP works fine--

Outlook 2007 on WinXPSP2--Internet--SOHO router--SBS2003SP2 Std.

However in this scenario--

OL2007 on WinXPSP2--LAN--ISA2004SP2--Internet--SOHO router--SBS2003SP2 Std.

--I get prompted repeatedly for credentials by my server, but can't authenticate.

OUTLOOK /RPCDIAG shows all entries as "Connecting" when behind ISA. Status never changes.

In ISA logs, all HTTP connections from the XP client to the remote mail server are "Allowed". When I query for connections from "External" Network to the client, there are none. Period. No connections are Allowed, Denied or Failed. So it doesn't look like the server is answering.

The Win XP SP2 computer is a member of a domain that is not trusted by the
domain on which the ISA firewall is deployed (if that's relevant). It is a web proxy client to ISA. HTTP & HTTPS web browsing works fine.

Firewall Client is installed on the client computer, but does not work unless I make a VPN connection. (ISA is also RRAS server). But once I make a VPN connection, FWC authenticates, and I can also use RPC over HTTP.

Is there a way to make the 2nd scenario work as a web proxy client...without
the VPN connection & FWC?

Or...is there a way to make FWC work on the untrusted domain member without a VPN connection?

[Edit]
2nd diagram (the one with ISA) works OK when I'm using a domain member. So the problem does appear to be related to the client computer being a member of an untrusted domain.

Any ideas on how to work around that, or is it just a limitation of ISA and there's nothing I can do?

< Message edited by JeffVandervoort -- 7.May2007 3:21:41 PM >