Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (Full Version)

All Forums >> [ISA Server 2000 General] >> Web Publishing



Message


tshinder -> Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (6.Feb.2004 6:25:00 PM)

This thread is for disucssing the article on how to put the HTTP over RPC proxy on the ISA2000 firewall computer at http://isaserver.org/articles/isarpchttpproxy.html.

HTH,
Tom

[ February 06, 2004, 06:44 PM: Message edited by: tshinder ]




Guest -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (21.Feb.2004 5:18:00 PM)

Hi, i enjoyed your article, a little beyond my needs but informative. I am not sure it this question even applies but i thought i would ask anyway. I initially set up SBS 2003 but felt this is not what i needed, so i switched to server 2003 and loaded exchange 2003 on it. We are a small company with only a few accts but we would like to use the rpc over http. I am unable to get this piece working. Can this work on a single box or do i need to set up a FE and hopefully make this a BE server. Room is limited in our rack, we already have 3 boxes in there, a 4th will make it pretty crowded. I look forward to your reply.
Thanks




tshinder -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (22.Feb.2004 7:41:00 PM)

Hi Bret,

Not sure it if will work when the ISA and Exchange are on the same machine. However, you can use a dedicated ISA box, and a single back end Exchange Server and it works fine.

HTH,
Tom




butor -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (1.Mar.2004 11:43:00 PM)

Hello I have a problem with my configuration of RPC over HTTP.

I don't use a frontend server.
mail.company.be is the name known on internet of the exchange site.

the name of the Exchange server is father.company.local

the certificate is issued to mail.company.be
I've put in the hosts file of the isa server a line with the address of father.company.local for mail.company.be

I can go to https://mail.company.be/rpc (I receive a red forbidden so it seems ok)

I can go on https/mail.company.be/exchange and everithing is right.

But I cannot establish a connection with outlook 2003. When I check the connection state I see that he always try with TCPIP and never with HTTPS. What can be wrong?
How can I check my config.




tshinder -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (25.Apr.2004 11:58:00 PM)

Hi Butor,

It sounds like a DNS config issue. Check the ISA Server 2000 Exchange Kit for DNS config issues. Make sure that it resolves the name of the Exchange Server to the IP address used to publish the RPC proxy.

A split DNS, of course, is always required.

HTH,
Tom




Aubrey -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (28.May2004 7:00:00 AM)

I believe i'm experiencing the same symptoms as butor. I have followed this guide to the letter and am trying to connect an extermal client that is using a broadband connection to the ISA Server that is hosting the rpc over http proxy. When I access the https://mail.mailserver.com/rpc url from a browser on the client machine, I am notified about the certificate, then prompted for a username password. After that's entered, I receive the HTTP Error 403.2 Forbidden: Read access is denied, which means that the proxy is working appropriately. But, when I attempt to configure the client, which I point to mail.mailserver.com using the connect to rpc proxy config in outlook2k3, it doesn't seem to be able to authenticate.

Any ideas?




Voltech -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (7.Jun.2004 10:07:00 PM)

Hello-

I currently have ISA server setup as a unihomed instance residing on the DMZ segment of a PIX firewall. I use it to publish OWA access along with access to things like share point portal and IIS web servers that reside on my internam segment. I would like to configure RPC over HTTP. The thing is I only have a single Exchange 2003 server supporting my messaging environment (no front end servers, that's why I used ISA [Smile] ) Is there any security issues or technical issues for that matter around running the RPC proxy service on a unihomed ISA server installed in Web caching mode, residing in a DMZ and simply publishing Microsoft servers. I would like to put this into production without creating any major security issues.

Thank you!




tshinder -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (8.Jun.2004 3:54:00 AM)

quote:
Originally posted by Aubrey:
I believe i'm experiencing the same symptoms as butor. I have followed this guide to the letter and am trying to connect an extermal client that is using a broadband connection to the ISA Server that is hosting the rpc over http proxy. When I access the https://mail.mailserver.com/rpc url from a browser on the client machine, I am notified about the certificate, then prompted for a username password. After that's entered, I receive the HTTP Error 403.2 Forbidden: Read access is denied, which means that the proxy is working appropriately. But, when I attempt to configure the client, which I point to mail.mailserver.com using the connect to rpc proxy config in outlook2k3, it doesn't seem to be able to authenticate.

Any ideas?

Hi Aubrey,

What is the name you use for your msstd?
What is the name you use for the Exchange Server?
What is the name of the Global Catalog Server?

HTH,
Tom




dre30326 -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (15.Sep.2004 4:45:00 AM)

Tom, Great article ! Got 2 questions

1) If I where to use ISA 2000 on a W2K (instead of 2003) server, can I use the instructions described in your article and substitute the following http://support.microsoft.com/default.aspx?scid=kb;en-us;238131 as a replacement of step 5 - Disable socket pooling for W3SVC?

2) If I wanted to front-end 2 different exchange servers using the single rpc proxy ... can that be done ? Specifically can I enter multiple exchange servers in step 9 ? Anything else that I would need to do ?

Thanks, Andre.




FAlsufyani -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (4.Feb.2007 2:56:45 AM)

Dear Thomas

you are really great expert...

we have two Pix firewall back -to- back and between them located  two ISA 2000 server in firewall mode and configured as NLB. currently those two ISA servers used to publish OWA, OMA, active sync and other internal website. we are not using exchange 2003 front end server. we have email address registered as https://mail.company.com.

I would like to know:
How to publish secure RPC over HTTP using ISA 2000 without effecting running services (OWA,OMA...etc)?

Note: windows 2003 standard edt. is used

Thanks for your great effort...




jaxon60 -> RE: Discussion of how to put the HTTP over RPC Proxy on the ISA Firewall machine (10.Apr.2007 1:39:09 PM)

Thomas

I am interested in using the RPC over HTTP proxy to access our Exchange servers. We have a site with a ex server local and another ex server in a vpn connected location. If I set up RPC over HTTP on the local ISA it will point to the local ex server. Will exchange locate mailboxes on the vpn connected ex server for users homed there?

Thanks




Page: [1]