locked
IAG 2007 and Outlook Anywhere RRS feed

  • Question

  • Hello,

    I would like to know if it is possible to publish Outlook Anywhere trough
    IAG 2007 SP2. I found this article
    (http://technet.microsoft.com/en-us/library/dd278076.aspx) describing it for
    Exchange 2003 (RPC over HTTPS), but there is no article for Exchange 2007.
    Also there is no How-To configure it.

    Thanks and best regards

    Markus
    Thursday, October 1, 2009 6:29 AM

Answers

  • The technet article you mentioned relates to one of the ways of publishing Native Outlook within and IAG portal, not Outllok Anywhere.   You can certainly publish Native Outlook within an IAG trunk.  Just run the add application wizard within your existing trunk and follow the prompts.  Should be very straightforward.   Howerver this does require the user to first open a browser and log into the trunk.  You could conceivably set the native outlook application to start autmatically, but the typically (and default) scenario would be that it is one of multiple applications on the IAG mnu, and the user clicking the outlook link will start the tunnel to handle rpc traffic to the configured exchange servers as well as start the outlook.exe.  The oulook client will think its talking directly to the exchane sever bit the IAG client components will intercept and tunnel the traffic to the IAG.

    Outlook Anywhere is not the same.  Outlook anywhere does not require a browser to started first, and the outlook client itself makes it communication on 443.  IAG software does not natively handle this.  UAG will.  On IAG appliance, you can either just publish native outlook on the IAG menu as described above, or if you really need Outlook Anywhere, you can do it in the included ISA software on the IAG appliance.  Note that to do this in ISA you'll need to adjust IIS6 as by default it uses socket pooling and both IAG and ISA wouldn;t be able to use port 443.  See the following article which describes the commands needed to disable socket pooling:  http://www.ssl-vpn.de/wiki/Publish%20HTTP%2c%20HTTPS%20with%20ISA%20and%20IAG%20at%20the%20same%20time.ashx     Then just follow any standard articles you can find on isaserver.org or elsewhere regarding publishing outlook thru ISA.

    Thanks,
    Mark
    Friday, October 2, 2009 1:31 AM
  • Oulook Anywhere with Exchange 2007 has some improvements, but it's behavior is basically the same for this purpose. The article you quoted talks about configuring the RPC Proxy, which resides on a separate computer than the IAG server, so these steps are exactly the same.
    Ben Ari
    Microsoft CSS IAG Support
    Sammamish, WA
    • Marked as answer by Erez Benari Thursday, October 1, 2009 5:06 PM
    Thursday, October 1, 2009 5:06 PM

All replies

  • Oulook Anywhere with Exchange 2007 has some improvements, but it's behavior is basically the same for this purpose. The article you quoted talks about configuring the RPC Proxy, which resides on a separate computer than the IAG server, so these steps are exactly the same.
    Ben Ari
    Microsoft CSS IAG Support
    Sammamish, WA
    • Marked as answer by Erez Benari Thursday, October 1, 2009 5:06 PM
    Thursday, October 1, 2009 5:06 PM
  • Hello,

    thanks for your answer. Do you know if there is an How-To configure IAG itself for use with Outlook Anywhere.

    Thanks

    Markus Pfeiler
    Thursday, October 1, 2009 6:54 PM
  • The technet article you mentioned relates to one of the ways of publishing Native Outlook within and IAG portal, not Outllok Anywhere.   You can certainly publish Native Outlook within an IAG trunk.  Just run the add application wizard within your existing trunk and follow the prompts.  Should be very straightforward.   Howerver this does require the user to first open a browser and log into the trunk.  You could conceivably set the native outlook application to start autmatically, but the typically (and default) scenario would be that it is one of multiple applications on the IAG mnu, and the user clicking the outlook link will start the tunnel to handle rpc traffic to the configured exchange servers as well as start the outlook.exe.  The oulook client will think its talking directly to the exchane sever bit the IAG client components will intercept and tunnel the traffic to the IAG.

    Outlook Anywhere is not the same.  Outlook anywhere does not require a browser to started first, and the outlook client itself makes it communication on 443.  IAG software does not natively handle this.  UAG will.  On IAG appliance, you can either just publish native outlook on the IAG menu as described above, or if you really need Outlook Anywhere, you can do it in the included ISA software on the IAG appliance.  Note that to do this in ISA you'll need to adjust IIS6 as by default it uses socket pooling and both IAG and ISA wouldn;t be able to use port 443.  See the following article which describes the commands needed to disable socket pooling:  http://www.ssl-vpn.de/wiki/Publish%20HTTP%2c%20HTTPS%20with%20ISA%20and%20IAG%20at%20the%20same%20time.ashx     Then just follow any standard articles you can find on isaserver.org or elsewhere regarding publishing outlook thru ISA.

    Thanks,
    Mark
    Friday, October 2, 2009 1:31 AM
  • Thank you for your answer, that really helps solving my problem.

    Best regards

    Markus Pfeiler

    Friday, October 2, 2009 6:18 AM