Welcome to ISAserver.org
Forums |
Register |
Login |
My Profile |
Inbox |
RSS 
|
My Subscription |
My Forums |
Address Book |
Member List |
Search |
FAQ |
Ticket List |
Log Out
RE: OMA & OWA 2-External IP Configuration
|
Users viewing this topic:
none
|
Logged in as: Guest
|
Login  | |
|
RE: OMA & OWA 2-External IP Configuration - 14.Dec.2005 3:35:22 AM
|
|
|
bheusmann
Posts: 91
Joined: 13.Oct.2004
Status: offline
|
Tom,
First let me start off by thanking you for all the assistance you have given me. Secondly, I hope we are able to figure this out and this will at least for some be a helpful guide in getting ActiveSync configured.
ActiveSync Access Log
I noticed something... I don't know what that access to 192.168.0.2 on line 10 is? It happens quite frequently though. The only web application I have on the perimeter server is eRoom. Other than that it only serves as an external DNS & basic webserver.
-Bryan
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 14.Dec.2005 4:34:01 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi Bryan,
There's only one line in the log file that pertains to a Windows Mobile connection and unfortuneately doesn't tell me much.
It looks like the initial connection fails and doesn't even get a chance to fail the second connection. This indicates that maybe the CA certificate isn't installed on the client.
If that's not the problem, at this point I'd need a network diagram showing the IP addresses on the ISA firewall and the Exchange Server, the exactly configuration of the Web Publishing Rules that aren't working, and a check of the certificates bound to the ISA firewall's listeners and the CA certificate of the CA that issued those certificates.
Tom
_____________________________
Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 15.Dec.2005 4:24:33 PM
|
|
|
bheusmann
Posts: 91
Joined: 13.Oct.2004
Status: offline
|
A quick thought...I just noticed that on my ISA2004 server I am receiving the message that my evaluation version has expired. I purchased the full version, but have not installed over the eval yet. Could this be causing problems with my ActiveSync connection? I think it actually expired earlier this month, I mainly use RDP to access the server so I didn't see the message until I physically went to the server.
-Bryan
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 15.Dec.2005 4:54:50 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi Bryan,
Hard to say. I never ran an expired trial version. You can try to install the full version and try it again and see what happens.
Tom
_____________________________
Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 21.Dec.2005 4:10:53 PM
|
|
|
bheusmann
Posts: 91
Joined: 13.Oct.2004
Status: offline
|
I reinstalled ISA 2004 with my full version and I now am receiving these messages in the logs:
ISA ActiveSync Errors
If this does not provide any additional information, I will be glad to provide a newtork diagram and whatever else might be needed to get ActiveSync working correctly. The errors appear to be a little different than when the ISA software was expired. Thank you.
-Bryan
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 24.Dec.2005 10:17:22 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi Bryan,
These log file entries look like the CA certificate wasn't installed on either the client or the ISA firewall. Make sure the ISA firewall has machine certificate and a CA certificate installed. Machine cert goes in the Personal store of the machine, and the CA cert goes into the Trusted Root Certification Authorities store of the machine.
HTH,
Tom
_____________________________
Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 4.Jan.2006 11:37:46 AM
|
|
|
zonex
Posts: 2
Joined: 4.Jan.2006
From: Carlsbad, CA
Status: offline
|
Not too sure if this applies, but check out what ASP.net version you are running on the IIS 6 server... I have had 3 installations in the last 4 weeks on SBS 2k3, and after installing all patches and updates from MS, some of the functionality gets broken (either Exchange OMA/OWA; CompanyWeb, etc.).
Go into IIS, right click on the (default) website in question, click properties... Click the ASP.net tab. Some servers seem to work fine w/ version 2.x, I had mine updated and stopped working w/ 2.x, backed it off to 1.1.4x and it works again. Also, make sure the version is in sync w/ each of the critical folders :
OMA
Microsoft-Server-Activesync
Exchange
Exchweb
Exchange-oma
etc, etc...
The reason I found this was because my Sprint/Nextel PPC-6700 was reporting error message 0x85010014 on Activesync. It was hit or miss. Sometimes it would sync, other times it kept reporting an error.
My SBS is running behind a cheap NAT/router/firewall and using homegrown CA signing. The cert was installed on the PPC-6700, so... See if that helps.
tmp
< Message edited by zonex -- 4.Jan.2006 11:46:08 AM >
_____________________________
thomas
ZoNE-X
(www.zone-x.com)
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 4.Jan.2006 7:43:20 PM
|
|
|
lolson
Posts: 43
Joined: 23.Nov.2005
Status: offline
|
I'm curious, what is the reason for wanting separate listeners? I have OWA, Active Sync, and RPC over HTTP running on a single IP address and Certificate.
I can also access my OWA internally albit internally we deal with a certificate warning.
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 6.Jan.2006 4:47:31 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi Lolson,
The reason is that you can't have OWA FBA enabled on a listener that you want to publish OMA/ActiveSync and RPC/HTTP on. So you need at least one more listener.
HTH,
Tom
_____________________________
Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 6.Jan.2006 8:54:20 PM
|
|
|
lolson
Posts: 43
Joined: 23.Nov.2005
Status: offline
|
quote:
ORIGINAL: tshinder
The reason is that you can't have OWA FBA enabled on a listener that you want to publish OMA/ActiveSync and RPC/HTTP on. So you need at least one more listener.
I disagree. My OWA FBA, RPC/HTTP and ActiveSync all use the same IP and Listener. I have it working in a production environement as I type. I'm not using the OMA portion of ActiveSync.
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 8.Jan.2006 8:20:44 AM
|
|
|
zonex
Posts: 2
Joined: 4.Jan.2006
From: Carlsbad, CA
Status: offline
|
Very helpful URL for ID'ing Microsoft Activesync Server error codes... This actually fixed 100% of problem w/ 0x85010014 issues...
http://blog.flaphead.dns2go.com/archive/2005/11/21/3202.aspx
Enjoy!
_____________________________
thomas
ZoNE-X
(www.zone-x.com)
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 10.Mar.2006 6:13:25 AM
|
|
|
bheusmann
Posts: 91
Joined: 13.Oct.2004
Status: offline
|
quote:
ORIGINAL: zonex
Very helpful URL for ID'ing Microsoft Activesync Server error codes... This actually fixed 100% of problem w/ 0x85010014 issues...
http://blog.flaphead.dns2go.com/archive/2005/11/21/3202.aspx
Enjoy!
I know this has been beat to death, but I gave up for a while, then tried the stuff found on the web site, and it's still not working. Can ANYONE please help me to get this darn thing configured. I'll post network diagrams, or whatever, I don't know why this one feature is not working. Everything else I have done has worked and I have been able to troubleshoot, but not this. Anyone please drop me an email and see if we can get this figured out. Thanks.
-Bryan
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 15.Mar.2006 3:39:03 PM
|
|
|
tshinder
Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline
|
Hi Bryan,
In the ISA firewall logs, make sure that the Filter Information field is enabled, then check to see if the HTTP security filter is blocking these connections.
Thanks!
Tom
_____________________________
Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/
GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8
|
|
|
|
|
RE: OMA & OWA 2-External IP Configuration - 5.Apr.2006 2:19:11 AM
|
|
|
bheusmann
Posts: 91
Joined: 13.Oct.2004
Status: offline
|
quote:
ORIGINAL: tshinder
Hi Bryan,
In the ISA firewall logs, make sure that the Filter Information field is enabled, then check to see if the HTTP security filter is blocking these connections.
Thanks!
Tom
I added the Filter Information field then tried to sync. I amgetting the same error and the Filter Information field is blank? Any other ideas? Would adding an additional IP address to the External Interface and using that make any difference?Any help would be appreciated. Thanks.
Bryan
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
Printable Version
