RE: OWA behind ISA

  • From: "David Liles" <dave@xxxxxxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sun, 17 Aug 2003 21:55:14 -0500

Well Sir, we finally figured out our issue..... several months ago we had an 
"Active Directory Melt-down" after installing a MS recommended security 
patch.... 

Long story short... we had to grant MS tech support staff terminal service 
access to our server so they could rebuild sections of our AD... during the 
process the tech support representative told us we should disable the default 
Exchange Virtual Server that is in /protocols/HTTP section within Exchange, and 
create one specific to our connection.

When configuring our new Exchange server we disabled the default Virtual Server 
as MS suggested previously and then we created one specific to our site. Upon 
closer review we noticed that the virtual server instance we created did not 
include the two virtual directories (Exchange and public) that are present in 
the default configuration. Once we created those our configuration now works as 
expected.

We want to thank everyone who answered our questions and provided feedback, and 
hopefully what we've discovered will help others.



-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Sunday, August 17, 2003 9:03 PM
To: [ExchangeList]
Subject: [exchangelist] RE: OWA behind ISA


http://www.MSExchange.org/

Hi David,

If you can tell me in what ways your setup deviates from the best
practices I've outlined in my series, I can probably come up with a very
quick solution for you.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] 
Sent: Sunday, August 17, 2003 7:00 PM
To: [ExchangeList]
Subject: [exchangelist] RE: OWA behind ISA


http://www.MSExchange.org/

Ok... we've made some good progress...

We've been able to access OWA from our intranet by creating a separate
DNS entry (ourdomain.net) and then configuring the IIS entry for OWA to
also accept that header.

Now, we've deleted all of our previous ISA configurations for OWA and
started from scratch.... following the MS KB 290113

Just and FYI... the box running Exchange/OWA is not the same as our ISA
box...

When we enter the URL for OWA from an external system
(http://ourURL/exchange) we get prompted for a username and password as
expected however, once we enter this and get validated and redirected,
we are presented with a 404 error.

Now, we know things appear to be configured correctly other then the 404
which we do not get from our internal systems when accessing OWA.

We're almost there.... what have we missed?

Thanks

-----Original Message-----
From: Mark Fugatt [mailto:mark@xxxxxxxxx]
Sent: Sunday, August 17, 2003 1:30 PM
To: [ExchangeList]
Subject: [exchangelist] RE: OWA behind ISA


http://www.MSExchange.org/

Um, its strange that you cannot access it locally either, did you check
the
other KB article I sent?

Mark Fugatt 
MCT, MCSE, Microsoft Exchange MVP 
Pentech Office Solutions Inc 
Tel:  585 586 3890
Cell: 585 576 4750
Fax:  585 249 0316 
www.4mcts.com 
www.exchangetrainer.com 

-----Original Message-----
From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] 
Sent: Sunday, August 17, 2003 1:58 PM
To: [ExchangeList]

http://www.MSExchange.org/

We have not run URLScan... we're still in the "configuration" mode for
the new exchange box....

-----Original Message-----
From: Mark Fugatt [mailto:mark@xxxxxxxxx]
Sent: Sunday, August 17, 2003 12:24 PM
To: [ExchangeList]
Subject: [exchangelist] RE: OWA behind ISA


http://www.MSExchange.org/

Have you run URLSCAN on the server?

Mark Fugatt 
MCT, MCSE, Microsoft Exchange MVP 
Pentech Office Solutions Inc 
Tel:  585 586 3890
Cell: 585 576 4750
Fax:  585 249 0316 
www.4mcts.com 
www.exchangetrainer.com 


-----Original Message-----
From: David Liles [mailto:dave@xxxxxxxxxxxxxxxxxxx] 
Sent: Sunday, August 17, 2003 1:12 PM
To: [ExchangeList]

http://www.MSExchange.org/

We are trying to configure OWA on our Exchange 2000 server that is
located on our internal network.

We are able to send and receive regular Outlook email however, when
attempting to access email via OWA we get the following error:

403 Forbidden - The server denies the specified Uniform Resource Locator
(URL). Contact the server administrator. (12202)
Internet Security and Acceleration Server

We have followed KB articles 287646 and 308599

We are not even able to access OWA from within our own network... 

Thanks

Dave

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
mark@xxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')




------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
dave@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
mark@xxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
dave@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSExchange.org Discussion List as: 
dave@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: