Answered Web Listener

  • Sunday, October 21, 2012 11:30 AM
     
     
    We are transitioning from Exchange 2007 to Exchange 2010 (i.e., moving all maiboxes, publics etc., to Exchange 2010)

    Currently, there is a single SSL certicate (DNS=webmail.domain.com.au) issued by Thawte on the web listener for OWA in the TMG box.

    There are no other DNS names in the SAN certificate........

    Config:
    Exchange 2007 IP Address 192.168.0.10
    Exchange 2010 IP Address 192.168.0.11


    Plan:
    It was decided to use the current SAN certificate of Exchange 2007 server and apply it to Exchange 2010
    The web listener uses the above SAN certificate for OWAN and ActiveSyn
    Export the SAN certificate from Exchange 2007 server>MMC>Certificates>Personals>Export Certificate
    then import it from Exchange Server>Server Configuration>Import Exchange Certificate



    Questions:

    After export the SSL certificate from Exchange 2007 then importing into Exchange 2010, Do I need to do anything in the TMG box apart from pointing the OWA listener and ActivySync listener to 192.168.0.11?

All Replies

  • Sunday, October 21, 2012 12:00 PM
     
     Answered

    Hi,

    you must change the Exchange Webclient publishing rule on your TMG Server to point to the Exchange 2010 CAS Server for redirecting requests for Exchange 2007 users to the correct Exchange Server.
    There are some additional steps on the Exchange Server for correct CAS redirecting / CAS Proxy:
    http://technet.microsoft.com/en-us/library/bb310763.aspx


    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

  • Sunday, October 21, 2012 12:04 PM
     
     

    Thanks Marc

    I will be removing Exchange 2007 after I have moved all the mailboxes, public folders, OAB, etc from Exchange 2007 to Exchange 2010 including exporting the single SSL certificate from Exchange 2007 then import it into Exchange 2010.

    So proxy is not required or not necessary?

    thanks