Hi, After i install ISA 2004 on SBS2003, 1. OWA & RWW doesn't work. Accessing by http://servername/exchange or http://192.168.16.2/exchange OK.Accessing https://www.mydomain.com/exchange or /remote from internal & external fail. -RESULT- The page cannot be displayed Explanation: There is a problem with the page you are trying to reach and it cannot be displayed. --------------------------------------------------------------------------------Try the following:Refresh page: Search for the page again by clicking the Refresh button. The timeout may have occurred due to Internet congestion. Check spelling: Check that you typed the Web page address correctly. The address may have been mistyped. Access from a link: If there is a link to the page you are looking for, try accessing the page from that link. --------------------------------------------------------------------------------Technical Information (for support personnel)Error Code: 403 Forbidden. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202) 2. On client PC, Cannot connect to SBS using Firewall Client shortcut Connect to Small Business Server-Connection Status"Unable to establish the VPN connection. The VPN server may be unreachable, or security parameters may not be configured properly for this connection. (Error 800) For customized troubleshooting information for this connection, click Help." But Internet is available on client pc.
After reading through Tom Shinder http://www.isaserver.org/articles/2004sbsinstallpart3.html, this is what i findout. Quote - "The Web Server Certificate page enables you to specify a Web site certificate for your Web server. This is a critical page since the name you put in the Web server name text box is the name that users must use to access the Web site when using ISA firewall Web Publishing Rules. For example, if the Web site certificate has the common/subject name www.msfirewall.org, then users must use that name in their Web requests, such as http://www.msfirewall.org/exchange. The name you enter into the Web server name text box must also resolve to the IP address accepting connections to the Web site over the Internet. This will vary with your network configuration. If you have a NAT device or a simple stateful packet inspection firewall that performs NAT in front of the SBS computer, then the public address assigned to the external interface of that front-end device is the IP address that this FQDN must resolve to. If you are connecting the SBS computer directly to the Internet using a cable or DSL “modem”, then the FQDN must resolve to the IP address assigned to the external interface of the SBS computer." /quote Last time around i put webserver.mydomain.com in the Create a new Web server certificate, in order to use OWA & RWW i need to access by https://webserver.mydomain.com/exchange and have an "A" record webserver.mydomain.com with the ISP. Rerun the CEICW and use www.mydomain.com for new Web certificate. Since my ISP already have my www "A" record, everything now seem to fall in place. I can now access OWA by https://www.mydomain.com/exchange , Problem Solve.