RE: Outlook 2003 RPC over HTTPS and authenticated proxies
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Fri, 7 Oct 2005 11:30:26 -0500
Hey Jim,
I've seen the same thing, but no captures. I'll get these to you and the
isainfo if you want to play with it.
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx]
> Sent: Friday, October 07, 2005 11:20 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Outlook 2003 RPC over HTTPS and
> authenticated proxies
>
> http://www.ISAserver.org
>
> I'd be interested in your internal captures.
> I do exactly this from home on a daily basis with no issues at all.
> OL2K3 uses WinHTTP via RPC to make the RPC/HTTP connection.
>
> -------------------------------------------------------
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/Jim_Harrison/
> http://isatools.org
> Read the help / books / articles!
> -------------------------------------------------------
>
>
> -----Original Message-----
> From: Stefaan Pouseele [mailto:Stefaan.Pouseele@xxxxxxx]
> Sent: Friday, October 07, 2005 08:26
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Outlook 2003 RPC over HTTPS and
> authenticated proxies
>
> http://www.ISAserver.org
>
> Hey guys,
>
> I'm testing the following scenario:
>
> XPSP2 --- [ISA1] --- Internet --- [ISA2] --- Exchange
>
> The XPSP2 workstations is at a customer location with an ISA 2000/2004
> server as firewall.
>
> Now, it seems that the RPC over HTTPS component in Windows XP SP2 does
> *not* support authenticated proxies. When I create on ISA1 an allow
> anonymous access rule to the destination ISA2 (ISA 2004 server), I can
> access the Exchange server without problems.
> An Ethereal trace confirms that the AutoConfig (wpad) does
> work, but as
> soon as ISA1 ask for authentication, the workstation never resend the
> request with the needed credentials.
>
> Is this a limitation of the current implementation?
>
> Thanks,
> Stefaan
>
> ----------------------------------------------------------------
>
> Disclaimer
>
> De informatie in dit bericht is uitsluitend bedoeld voor de
> geadresseerde en kan vertrouwelijke en/of bevoorrechte gegevens en/of
> door intellectuele-eigendomsrechten beschermde informatie bevatten.
> Als u niet de geadresseerde bent, gelieve dit bericht te
> verwijderen en
> de afzender te verwittigen. U mag dit bericht niet gebruiken,
> wijzigen,
> dupliceren of verspreiden, noch de inhoud ervan bekendmaken aan een
> derde.
> De veiligheid of juistheid van e-mailberichten kan niet gegarandeerd
> worden, vermits de informatie onderschept, verbasterd of
> vernietigd kan
> worden, zoek kan raken, te laat of onvolledig kan aankomen of virussen
> kan bevatten.
> Cevi NV aanvaardt geen enkele aansprakelijkheid voor verlies of schade
> die op enigerlei wijze te wijten is aan het gebruik van het medium.
> Eventuele standpunten of meningen in dit bericht zijn die van
> de auteur
> en geven niet noodzakelijk die van Cevi NV of zijn verbonden
> ondernemingen weer.
> Bijgevolg bindt dit e-mailbericht Cevi NV niet, tenzij het een
> uitdrukkelijke andersluidende verklaring van een gemachtigde
> vertegenwoordiger bevat.
>
> Cevi NV, Bisdomplein 3, 9000 Gent - tel. 09 264 07 01 - Rek. nr.
> 091-0015991-15
> RPR Gent - BTW BE 0860.972.295 -
> cevi@xxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> All mail to and from this domain is GFI-scanned.
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
Other related posts:
