Welcome to ISAserver.org

mailbox without logon

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> Exchange Publishing >> mailbox without logon

Page: [1]

Message

<< Older Topic Newer Topic >>

mailbox without logon - 12.Aug.2008 10:42:28 PM

Geoff_C

Posts: 3
Joined: 12.Oct.2004
From: Perth Western Australia
Status: offline

Hello,

I'm running ISA 2004 with all updates and have outlook web access published on the ISA box. It has all been running fine (year in and out)until this morning. I received a call from my manager. She accesses her mail via outlook web access. When she enters the URL instead of getting the logon screen she got connected to another users mailbox. Obviously a major security issue. She has sent me a screen shot to confirm. She has no access rights to the users mailbox that connected and that user has not ever used the pc she uses to connect. I have disabled the owa rule in ISA. To test I enabled the rule and conencted from a remote pc and got the logon screen and access to my mailbox as normal with no issue. I then disabled the rule again. Looking thru the event logs I can't see anything out of the ordinary for this to occur. The only thing I have noticed is at some time during the night our exchange server had issues resolving external dns names and the isa box seemed to be not forwarding dns requests. We have GFI webmon on the server and recently upgraded to version 4. Also we have added some caching rules for sites that we don't want to cache (acconex) and cached our corporate website to try and reduce bandwidth.

Has anyone had a simular issue? Is there a tool I can run on the ISA box to test OWA setup for issues or misconfiguration? I have run the ISABPA and it doesn't show any issues. Could it be caching issue

Thanks in advance !

Geoff