• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

BPOS and ISA 2006

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA 2006 Firewall] >> General >> BPOS and ISA 2006 Page: [1]
Login
Message << Older Topic   Newer Topic >>
BPOS and ISA 2006 - 30.Apr.2009 11:41:03 AM   
meyer_gm

 

Posts: 16
Joined: 15.Apr.2008
Status: offline
Hi,

I am trying to set up a BPOS user behind an ISA 2006 Standard firewall. The servies I'm trying to connect to are the Online Services Exchange server. However it seems that everytime I try to configure the Outlook account it can't hit the Online Exchange server by DNS name. Is there a port that I can open to allow the DNS traffic to flow through? This is odd because I can hit the Online Services OWA by name just fine but not when I'm configuring Outlook.

Thanks,

Georgi
Post #: 1
RE: BPOS and ISA 2006 - 30.Apr.2009 12:14:45 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
DNS port of TCP/UDP 53 outbound...

But, Can you tell me how is your client configured? From what you are telling me it seems you have users configured as Web proxy clients (IE set to use proxy)?




_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to meyer_gm)
Post #: 2
RE: BPOS and ISA 2006 - 30.Apr.2009 12:32:32 PM   
paulo.oliveira

 

Posts: 3472
Joined: 3.Jan.2008
From: Amazon, Brazil
Status: offline
Hi,

is your ISA single-NIC configuration?

Regards,
Paulo Oliveira.

(in reply to meyer_gm)
Post #: 3
RE: BPOS and ISA 2006 - 30.Apr.2009 12:44:09 PM   
meyer_gm

 

Posts: 16
Joined: 15.Apr.2008
Status: offline
My client is configured to use a proxy server. It seems to be the only way to get outbound connectivity from the ISA server. The server is configured with two NICS. One public and one private.

(in reply to inderjeet)
Post #: 4
RE: BPOS and ISA 2006 - 30.Apr.2009 12:55:31 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Did you try installing the ISA Firewall Client? Web proxy clients only pass browser based requests to the ISA. Try installing the FWC on the machine

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to meyer_gm)
Post #: 5
RE: BPOS and ISA 2006 - 30.Apr.2009 2:24:56 PM   
meyer_gm

 

Posts: 16
Joined: 15.Apr.2008
Status: offline
I installed the ISA client and tried to configure it to our proxy server and it says failed to connect to server. Maybe this type of setup isn't possible. Or I have my ISA sever configured incorrectly.

(in reply to inderjeet)
Post #: 6
RE: BPOS and ISA 2006 - 30.Apr.2009 2:52:13 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Does that fail if you manually give the ISA server's FQDN? To make automatic detection work you have to do the following

Enable Automatic discovery on ISA Server under networks > Internal > Automatic Discovery

Then in your DNS server create following two CNAME entries to your existing ISA Server DNS name

WPAD.domain.com
WSPAD.domain.com

Try automatic connection from FWC.

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to meyer_gm)
Post #: 7
RE: BPOS and ISA 2006 - 30.Apr.2009 6:01:28 PM   
meyer_gm

 

Posts: 16
Joined: 15.Apr.2008
Status: offline
Still a no go even with the firewall client configured and the ISA configured. Maybe I have something wrong on the firewall itself. I'll have to verify the configuration with our documentation.

Thanks,

Georgi

(in reply to inderjeet)
Post #: 8
RE: BPOS and ISA 2006 - 30.Apr.2009 6:21:28 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Why not contact BPOS Support team?? They are experienced in handling these scenarios on day to day basis

_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to meyer_gm)
Post #: 9
RE: BPOS and ISA 2006 - 30.Apr.2009 6:27:29 PM   
meyer_gm

 

Posts: 16
Joined: 15.Apr.2008
Status: offline
I have contacted BPOS support and they're not sure what's going on. I truly think it's a firewall issue and I'll probably have to live without Outlook.

Thanks for all your help today.

Georgi

(in reply to inderjeet)
Post #: 10
RE: BPOS and ISA 2006 - 30.Apr.2009 7:14:09 PM   
inderjeet

 

Posts: 463
Joined: 25.Nov.2008
Status: offline
Can you send me the logs from your client machine and the ISA? It's interested to investigate and help others with a solution, if we can get ot

1. Install the Network Monitor 3.2 on client machine and on the ISA Server
2. Install ISABPA on the ISA Server as mentioned below
3. Start the ISABPA on ISA as mentioned below
4. Start Network Monitor on Client machine
5. Test the connectivity
6. Stop the Network Monitor on client and save the logs as .CAP file
7. Stop ISABPA and it will save the file automatically on your desktop as isapackage.cab
8. Send me the logs at isaissues@yahoo.com or you may upload it on rapidshare or megashare and send me the link in email. Dont paste it here


ISA BPA can be downloaded and installed from the following location:
http://www.microsoft.com/downloads/details.aspx?FamilyID=d22ec2b9-4cd3-4bb6-91ec-0829e5f84063&DisplayLang=en

After installing this please run the ISA Data Packager from the Start, Programs, ISA Server, ISA Tools menu Select the ‘Collect data from one of the following repro scenarios’ radio button and select the ‘Basic Repro and Static Configuration’ option, select ‘Next’ and then ‘Start Data Collection’.

When the ISA Data Packager has initialized the various data captures you will be asked to press the Spacebar to start capturing data. This is going to capture a number of data outputs from a repro of the issue (Network traces, ISA tracing output, ISA logs) so before running this and pressing the spacebar please get set-up to repro the issue.

When you are ready to repro the issue press the spacebar, repro the issue and then press the spacebar again to stop the captures. If you can try to keep this the time you are capturing quite short that will help our analysis of the data.

The BPA will also gather config data from the ISA server that will help us understand your set-up and will output all the data captures to a file on the desktop called isapackage.cab.



_____________________________

Inderjeet (MSFT)
My Blog: http://isingh.spaces.live.com

If you are a Microsoft Gold Partner, Contact us for Advisory/Consulting Services, Check https://partner.microsoft.com/US/supportsecurity/40012316

(in reply to meyer_gm)
Post #: 11

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA 2006 Firewall] >> General >> BPOS and ISA 2006 Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts