• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Publishing OWA

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> Publishing OWA Page: [1]
Login
Message << Older Topic   Newer Topic >>
Publishing OWA - 15.Aug.2006 2:24:31 PM   
sxlalan

 

Posts: 18
Joined: 3.Nov.2004
Status: offline
Can anyone offer any tips on publishing an Exchange 2003 Front End Server over SSL using ISA 2006?  AT the moment I am able to connect to the isa server using the url of my published server and get to the forms based authentication page.  When I enter my credentials and click the Log On button I am immediately presented with the following...

  • Error Code: 403 Forbidden. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)

    This shows up in the ISA log as an Access Denied message processed by the Default Enterprise rule.  The source IP is my external clients IP and the destination is the (Virtual) IP of the ISA external network that I am trying to publish the Exchange server through.

    Any suggestions would be greatly appreciated!

    Thanks

    Alan
  • Post #: 1
    RE: Publishing OWA - 15.Aug.2006 2:36:29 PM   
    tshinder

     

    Posts: 50013
    Joined: 10.Jan.2001
    From: Texas
    Status: offline
    Hi Alan,

    Have you read my recent articles on how to publish OWA on ISA 2006? All the details are there.

    HTH,
    Tom

    _____________________________

    Thomas W Shinder, M.D.

    (in reply to sxlalan)
    Post #: 2
    RE: Publishing OWA - 15.Aug.2006 2:42:09 PM   
    sxlalan

     

    Posts: 18
    Joined: 3.Nov.2004
    Status: offline
    Hi Tom.  I found the article about publishing the back-end server and had a read through that and it seems to be pretty much what I have done.  I'm not sure if there are important differences for a front-end server.

    I've discovered that what seems to be happening is that after I click log on I am redirected to https://mailserver.com/ rather than to https://mailserver.com/exchange.  if I add the exchange bit myself then OWA starts as expected.  Any ideas as to why this would be happening and how to resolve it?

    Thanks

    Alan

    (in reply to tshinder)
    Post #: 3
    RE: Publishing OWA - 15.Aug.2006 3:15:39 PM   
    sxlalan

     

    Posts: 18
    Joined: 3.Nov.2004
    Status: offline
    P.S. the default website on the FE Server has been set to automatically redirect to /exchange but this doesn't seem to be happening with ISA 2006.  The redirect works fine if I connect to te FE Server directly from our LAN.

    Cheers

    Alan

    (in reply to sxlalan)
    Post #: 4
    RE: Publishing OWA - 15.Aug.2006 3:52:18 PM   
    sxlalan

     

    Posts: 18
    Joined: 3.Nov.2004
    Status: offline
    This seems to be working now!  I had to add a path to the rule mapping "/" to "/exchange"  Dont try adding "/*" as the external path as this then conflicts with all of the other mappings.  Also, don't add "/exchange\" as the internal path (as Tom found worked for ISA2004) as this causes a corruption of the config with ISA2006!

    Thanks

    Alan

    (in reply to sxlalan)
    Post #: 5
    RE: Publishing OWA - 15.Aug.2006 9:38:20 PM   
    gja

     

    Posts: 50
    Joined: 15.Aug.2006
    From: The Netherlands
    Status: offline
    Hoi Alan,

    I had the same problem with connecting to exchange, and I didn't solve by adding a mapping but I added a rule. The rule is denies all the traffic to https://mailserver.domain.nl and redirects all the traffic to https://mailserver.domain.nl/exchange. The rule only listnes to the / path.

    But way you are doing it also works.

    Cheers
    Gijs

    (in reply to sxlalan)
    Post #: 6
    RE: Publishing OWA - 16.Aug.2006 9:00:39 AM   
    sxlalan

     

    Posts: 18
    Joined: 3.Nov.2004
    Status: offline
    Good tip, thanks Gijs

    (in reply to gja)
    Post #: 7
    RE: Publishing OWA - 17.Aug.2006 3:43:14 AM   
    tshinder

     

    Posts: 50013
    Joined: 10.Jan.2001
    From: Texas
    Status: offline
    Hey guys,

    Good info!
    Thanks!
    Tom

    _____________________________

    Thomas W Shinder, M.D.

    (in reply to sxlalan)
    Post #: 8
    RE: Publishing OWA - 19.Sep.2006 11:36:11 PM   
    kinai

     

    Posts: 2
    Joined: 19.Sep.2006
    Status: offline
    hello all,

    I'm used ISA 2006 to publish many differents Exchange Servers by using FBA and Radius.
    It's working as fine.

    I try to apply the path "/" to "/exchange" ... it seems working on the first publication.
    On the second publication, when I try to connect, the client send multiple HTTP request and ISA block the client IP address (spoofing, more than 500 HTTP Request per seconde).

    I can not apply the rules suggest by Gijs because I have multiple external domain name for the same server and the translation must keep the external server name.

    If someone have an idea.
    Thanks,
    Regards,
    Kinai

    ISA2006 / Two Exchange Organisation based on different Active Directory (different forest)
    Authentification based on forms and RADIUS.

    (in reply to tshinder)
    Post #: 9
    RE: Publishing OWA - 20.Sep.2006 1:43:25 PM   
    tshinder

     

    Posts: 50013
    Joined: 10.Jan.2001
    From: Texas
    Status: offline
    quote:

    ORIGINAL: gja

    Hoi Alan,

    I had the same problem with connecting to exchange, and I didn't solve by adding a mapping but I added a rule. The rule is denies all the traffic to https://mailserver.domain.nl and redirects all the traffic to https://mailserver.domain.nl/exchange. The rule only listnes to the / path.

    But way you are doing it also works.

    Cheers
    Gijs


    Hi Gijs,

    How do you do the redirect in the Deny Rule when there is no redirect ability for Deny Web Publishing Rules?

    Thanks!
    Tom

    _____________________________

    Thomas W Shinder, M.D.

    (in reply to gja)
    Post #: 10
    RE: Publishing OWA - 9.Oct.2006 11:29:03 AM   
    PCC

     

    Posts: 199
    Joined: 13.Nov.2001
    From: Michigan
    Status: offline
    quote:

    ORIGINAL: sxlalan

    This seems to be working now!  I had to add a path to the rule mapping "/" to "/exchange"  Dont try adding "/*" as the external path as this then conflicts with all of the other mappings.  Also, don't add "/exchange\" as the internal path (as Tom found worked for ISA2004) as this causes a corruption of the config with ISA2006!

    Thanks

    Alan


    I used the "/Exchange\" mapping rule in ISA 2004.  But if I add the rule to map "/" to "/Exchange" it just hangs when I try to logon.  I really don't want my users to have to remember to add the "/Exchange" to the end of the URL because I know they won't remember to do it.  Is there any other way to redirect if someone goes to https://owa.mydomain.com/ to make it go to https://owa.mydomain.com/exchange ?

    (in reply to sxlalan)
    Post #: 11
    RE: Publishing OWA - 11.Oct.2006 10:46:25 AM   
    tshinder

     

    Posts: 50013
    Joined: 10.Jan.2001
    From: Texas
    Status: offline
    Hi PCC,

    There's a trick I put in my blog on how to use the new ISA Firewall's ability to redirect denied requests to make it work without have to use the /Exchange\ trick.

    HTH,
    Tom

    _____________________________

    Thomas W Shinder, M.D.

    (in reply to PCC)
    Post #: 12
    RE: Publishing OWA - 11.Oct.2006 12:06:40 PM   
    PCC

     

    Posts: 199
    Joined: 13.Nov.2001
    From: Michigan
    Status: offline
    I must apologize, but I don't see anything in your blog on this topic.  Could you please provide a link or post it here?

    Thanks.


    (in reply to tshinder)
    Post #: 13
    RE: Publishing OWA - 11.Oct.2006 9:03:59 PM   
    PCC

     

    Posts: 199
    Joined: 13.Nov.2001
    From: Michigan
    Status: offline
    Tom,

    I did find your blog on the redirect.  I didn't look far enough back the first time.  It works great to redirect http://owa.mydomain.com to https://owa.mydomain.com/exchange (which I have been using WebDirect for in the past but this works just as good).  But I can't figure out how to redirect https://owa.mydomain.com to https://owa.mydomain.com/exchange .  I just seem to get a loop that keeps redirecting me to the FBA login page.  I guess it's not a big deal because I always direct everyone to use http://owa.mydomain.com anyhow and let the redirect take care of everything.  But I would like to get it working even if someone types https://owa.mydomain.com.

    (in reply to PCC)
    Post #: 14

    Page:   [1] << Older Topic    Newer Topic >>
    All Forums >> [ISA 2006 Publishing] >> Exchange Publishing >> Publishing OWA Page: [1]
    Jump to:

    New Messages No New Messages
    Hot Topic w/ New Messages Hot Topic w/o New Messages
    Locked w/ New Messages Locked w/o New Messages
     Post New Thread
     Reply to Message
     Post New Poll
     Submit Vote
     Delete My Own Post
     Delete My Own Thread
     Rate Posts