Well Sir, we finally figured out our issue..... several months ago we had an "Active Directory Melt-down" after installing a MS recommended security patch.... Long story short... we had to grant MS tech support staff terminal service access to our server so they could rebuild sections of our AD... during the process the tech support representative told us we should disable the default Exchange Virtual Server that is in /protocols/HTTP section within Exchange, and create one specific to our connection. When configuring our new Exchange server we disabled the default Virtual Server as MS suggested previously and then we created one specific to our site. Upon closer review we noticed that the virtual server instance we created did not include the two virtual directories (Exchange and public) that are present in the default configuration. Once we created those our configuration now works as expected. We want to thank everyone who answered our questions and provided feedback, and hopefully what we've discovered will help others. -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] Sent: Sunday, August 17, 2003 9:03 PM To: [ExchangeList] Subject: [exchangelist] RE: OWA behind ISA http://www.MSExchange.org/ Hi David, If you can tell me in what ways your setup deviates from the best practices I've outlined in my series, I can probably come up with a very quick solution for you. HTH, Tom Thomas W Shinder www.isaserver.org/shinder ISA Server and Beyond: http://tinyurl.com/1jq1 Configuring ISA Server: http://tinyurl.com/1llp -----Original Message----- From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] Sent: Sunday, August 17, 2003 7:00 PM To: [ExchangeList] Subject: [exchangelist] RE: OWA behind ISA http://www.MSExchange.org/ Ok... we've made some good progress... We've been able to access OWA from our intranet by creating a separate DNS entry (ourdomain.net) and then configuring the IIS entry for OWA to also accept that header. Now, we've deleted all of our previous ISA configurations for OWA and started from scratch.... following the MS KB 290113 Just and FYI... the box running Exchange/OWA is not the same as our ISA box... When we enter the URL for OWA from an external system (http://ourURL/exchange) we get prompted for a username and password as expected however, once we enter this and get validated and redirected, we are presented with a 404 error. Now, we know things appear to be configured correctly other then the 404 which we do not get from our internal systems when accessing OWA. We're almost there.... what have we missed? Thanks -----Original Message----- From: Mark Fugatt [mailto:mark@xxxxxxxxx] Sent: Sunday, August 17, 2003 1:30 PM To: [ExchangeList] Subject: [exchangelist] RE: OWA behind ISA http://www.MSExchange.org/ Um, its strange that you cannot access it locally either, did you check the other KB article I sent? Mark Fugatt MCT, MCSE, Microsoft Exchange MVP Pentech Office Solutions Inc Tel: 585 586 3890 Cell: 585 576 4750 Fax: 585 249 0316 www.4mcts.com www.exchangetrainer.com -----Original Message----- From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] Sent: Sunday, August 17, 2003 1:58 PM To: [ExchangeList] http://www.MSExchange.org/ We have not run URLScan... we're still in the "configuration" mode for the new exchange box.... -----Original Message----- From: Mark Fugatt [mailto:mark@xxxxxxxxx] Sent: Sunday, August 17, 2003 12:24 PM To: [ExchangeList] Subject: [exchangelist] RE: OWA behind ISA http://www.MSExchange.org/ Have you run URLSCAN on the server? Mark Fugatt MCT, MCSE, Microsoft Exchange MVP Pentech Office Solutions Inc Tel: 585 586 3890 Cell: 585 576 4750 Fax: 585 249 0316 www.4mcts.com www.exchangetrainer.com -----Original Message----- From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] Sent: Sunday, August 17, 2003 1:12 PM To: [ExchangeList] http://www.MSExchange.org/ We are trying to configure OWA on our Exchange 2000 server that is located on our internal network. We are able to send and receive regular Outlook email however, when attempting to access email via OWA we get the following error: 403 Forbidden - The server denies the specified Uniform Resource Locator (URL). Contact the server administrator. (12202) Internet Security and Acceleration Server We have followed KB articles 287646 and 308599 We are not even able to access OWA from within our own network... Thanks Dave ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: mark@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: dave@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: mark@xxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: dave@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 ISA Server Resource Site: http://www.isaserver.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this MSExchange.org Discussion List as: dave@xxxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')