i recently began an Exchange 2007 migration which includes ISA 2006. i have configured the OWA publishing and it is working fine. apparently i now have personal BB phone users that cannot utilize the BIS(blackberry internet service) to access their email. not that i want to allow this, but may have to.
Is there a way to allow BIS to still function while maintaining ISA 2006 in my exchange 2007 environment?
ISA 2006 isn't supported by Blackberry. There is a KB article somewhere on their site.. You would need to get a Blackberry Server and put it on location, you can get one with 10 clients I believe. Without ISA 2006 in front of Exchange 2007 it will work fine.
Yes i know it is not supported yet by blackberry/RIM. i was wondering if anyone has created ISA 2006 rules to make it work and if so what rules are they? im trying to determine all my options. thanks
I can confirm this worked for me. I added a couple of things to the steps. I got this working on Exchange 2007 on Server 2008 with ISA 2006.
1) On the Exchange Client Access Server, set EWS to accept basic authentication set-webservicesvirtualdirectory “servername\EWS (Default Web Site)” –basicauthentication $true
1.1) This can also be done in IIS 7 on the Exchange server by browsing to default site then EWS and selecting Authentication and enableing basic authentication.
2) On the ISA, Create an Exchange Client Access rule to publish Outlook Web Access. Use a listener using Basic Authentication with HTTP Authentication. Use an Authentication Delegation of Basic for the rule. Add the path /EWS/* to the paths tab.
3) Configure the BIS account to point to https://outlookwebaccessexternalurl The important thing here is not to include /owa or /exchange because that seems to stop it working
I was able to expand on this configuration and supply OWA with HTML Forms auth and OWA basic for Blackberry Phones.
Add a second NIC to ISA and create a second web listener using the IP of the new NIC and a new SSL Certificate. If you have an existing Web Listener setup you will need to go into that listener and set the IP address it uses for the SSL cert too or you will get an error.
Doing this I have OWA with Forms, ActiveSync, Outlook Anywhere, all published on one SSL Certificate/IP address and OWA for Blackberry phones on other IP address with another SSL Certificate.
Good idea, I didn't think of that. I was just so happy to get this working after searching for hours for answers and not finding much. I'll change my config around and see how it works.
ISA 2006 isn't supported by Blackberry. There is in actuality a KB write-up someplace on their site.. You would need to acquire a Blackberry Server and meet it on location, you can obtain just one with 10 customers I believe.