OWA Traffic not being passed to exchange hub
-
27 กุมภาพันธ์ 2555 20:19
Hi folks, so here's the issue, i have a client with isa working as a proxy within their network but for some reason its not handing https traffic off to the exchange hub, the web browser just timesout "webapage cannot be displayed"
Brief network explanation: Checkpoint frontend firewall----ISA---HUB1
We're seeing traffic hitting checkpoint and being allowed, but its simply not reaching isa or its reaching isa and being blocked o_O which is odd considering we have only two rules in isa which is to publsih activesync and owa, which worked until a week ago, when we had to shutdown. No idea whats going on...any ideas?
ตอบทั้งหมด
-
28 กุมภาพันธ์ 2555 5:17
Hi,
do you see allowed or denied HTTP/HTTPS requests in the ISA live logging from the client?
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de
-
28 กุมภาพันธ์ 2555 8:57ผู้ดูแล
Hi,
Thank you for the post.
Would you please elaborate the publishing rule?
Regards,
Nick Gu - MSFT
-
28 กุมภาพันธ์ 2555 13:38
Well thats the strange part i'm not seeing any https traffic reaching ISA at all, just checkpoint.
For publishing i followed this guide from tom http://www.isaserver.org/tutorials/Publishing-Outlook-Web-Access-Outlook-RPCHTTP-ISA-Server-2006-Firewalls-Forms-based-Authentication-Part4.html, the only major difference is for the web listener IP, they have internal (the ISA server) instead of external.
-
29 กุมภาพันธ์ 2555 6:56ผู้ดูแล
Hi,
Thank you for the update.
Based on this back to back scenario, you should create a Network Rule as "Route" between DMZ and Internal Network. Then create an Access Rule to allow traffic between DMZ and Internal Network. Also you need to make sure that checkpoint is properly configured to send traffic to ISA.
Regards,
Nick Gu - MSFT
- ทำเครื่องหมายเป็นคำตอบโดย Nick Gu - MSFTMicrosoft, Moderator 5 มีนาคม 2555 1:58
- ยกเลิกการทำเครื่องหมายเป็นคำตอบโดย radray 5 มีนาคม 2555 16:10
-
5 มีนาคม 2555 16:13 Thanks for the help guys, it seems IIS on ISA was hijacking the 443 port and not passing to traffic to the the HUB.
- ทำเครื่องหมายเป็นคำตอบโดย Jason Jones [MSFT]Microsoft, Moderator 7 มีนาคม 2555 11:34
-
6 มีนาคม 2555 5:04ผู้ดูแล
Hi,
Do you have resolved this issue?
Regards,
Nick Gu - MSFT
-
6 มีนาคม 2555 15:02Yes we did, thank you. IIS shouldnt have been installed on that ISA server in the first place, once we disabled it, ISA stopped hijacking the port and owa started working again. ^_^
.png)
