RE: Urgent Help me Please

You CANNOT require SSL in IIS if you're stopping the SSL connection at
ISA!  If you want to require SSL connection all the way to IIS then you
MUST use "SSL bridging" in ISA (that is, tell it to redirect SSL
connections as SSL as well, and not as plain http).

Alfonso

-----Original Message-----
From: Salvatore Fulci [mailto:sfulci@xxxxxxxxxxxxxxxxxx] 
Sent: Monday, September 30, 2002 9:42 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Urgent Help me Please

http://www.ISAserver.org


Hello Alfonso

Make sure you don't have the "Ask unauthenticated users..." box checked
on
the ISA Incoming Listener ===> It is not checked


Just deselect Anonymous in IIS ===> It is not selected

I put an entry in the Registry of ISA server
.....AddFrontEndHttpsHeader to
"1" value to avoid HTTP header problems when combining http and https

I get a 403 http error when i try to access owa with HTTPS but  only if
I
check  "require secure channel(ssl)" in IIS ....If I don't check this
option
I can access OWA with HTTP and HTTPS .....

Thanks for your Help


----- Original Message -----
From: "Alfonso Lopez de Ayala" <alopezdeayala@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, September 30, 2002 5:23 PM
Subject: [isalist] RE: Urgent Help me Please


> http://www.ISAserver.org
>
>
> Nah... don't need a "Server Publishing Rule" in addition to the "Web
> Publishing Rule".  The latter is sufficient.  If doing it this way,
make
> sure you don't have the "Ask unauthenticated users..." box checked on
> the ISA Incoming Listener -- Just deselect Anonymous in IIS.  It's
best
> to use Basic Authentication with SSL.  Make sure you're not having
HTTP
> header problems when combining http and https (see Q).
>
> Why do you want to NOT use https between ISA & IIS?  Would you
consider
> using SSL all the way thru?  Are Exchange/OWA/IIS all in the same box?
>
> Alfonso
>
> -----Original Message-----
> From: jennaro [mailto:sfulci@xxxxxxxxxxxxxxxxxx]
> Sent: Monday, September 30, 2002 7:02 AM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Urgent Help me Please
>
> http://www.ISAserver.org
>
>
> Hello
>
> I have a problem to publish owa with SSL ..... I installed a
certificate
> server on IIS/OWA web site and imported the private key in ISA Server
as
> explained in a Microsoftdocument .....I created a new "Web  Publishing
> Rule" to publish OWA and I checked the option "HTTP requests
(terminate
> the secure channel at the proxy)" because I want SSL connection
between
> Client browser and ISA Server and http traffic between ISA and IIS/OWA
> Server ......I made some check and I can connect OWA with HTTP and
HTTPS
> and all is working but I wanted to force SSL connection and on the
> IIS/OWA
> serveur I open "Internet Information Service" and I Rigth-click on
> "Default Web Site"/Exchange and select "propreties". On the "Directory
> Security" tab I click on "edit" and check the option "require secure
> channel(ssl)" but when I check this option I can't access OWA either
> with
> HTTP  nor with HTTPS ......
>
> I read on Microsoft Web site to publish OWA I have to create a
> "Publishing
> web rule" + a "Server Publishing rule" ...... I created only a "Web
> publishing rule" ....
>
> Thanks for your help ....
> Ciao
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> alopezdeayala@xxxxxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Exchange Server Resource Site: http://www.msexchange.org/
> Windows Security Resource Site: http://www.windowsecurity.com/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
sfulci@xxxxxxxxxxxxxxxxxx
> To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
alopezdeayala@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: