Hi Mats, In the scenario discussed in the doc, we publish the CA because the client isn't on the corpnet. If your client can access the corpnet, then you don't need to publish the CA, just obtain the cert. HTH, Tom -----Original Message----- From: Mats Hellman [mailto:mats.hellman@xxxxxxxxxxxxx] Sent: Tuesday, February 01, 2005 2:41 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA or ISA issue? http://www.ISAserver.org Now I'm starting to think there is something else wrong here. I got the MS ISA2004 & Exchange deployment document. I followed the document to publish the OWA and the CertSrv. Everything is done exactly like they recommend. I have the certificates installed in the is Trusted and so on. I published the CA server also and made a listener for it on IP .170. But once again when I try to connect the d*** default rule denies it. This should not happen. The CA isn't even behind SSL so there can be NO certificate issues. Where could this problem be? I did not even use FQDN for the CA server it's behind an IP, external one. ISA Log just shows it denies because of "default rule". HELP, what am I doing wrong here. _____________________________________ Mats Hellman @ mats.hellman@xxxxxxxxxxxxx -----Original Message----- From: Steve Moffat [mailto:steve@xxxxxxxxxx] Sent: 1. helmikuuta 2005 20:02 To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA or ISA issue? http://www.ISAserver.org Hi Mats, Did you follow Tom's directions that he posted last night? S -----Original Message----- From: Mats Hellman [mailto:mats.hellman@xxxxxxxxxxxxx] Sent: Tuesday, February 01, 2005 2:00 PM To: ISA Mailing List Subject: [isalist] RE: OWA or ISA issue? http://www.ISAserver.org It is the ISA default rule. This is the one rule created on install. It's the last one on the list. I have had the same problems for a few days now so I'm back to the drawing board. _____________________________________ Mats Hellman @ mats.hellman@xxxxxxxxxxxxx -----Original Message----- From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: 1. helmikuuta 2005 19:58 To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA or ISA issue? http://www.ISAserver.org Hi Jim, I just had a look at ISA's logs. It seems that it allows both port 80 and 443 coming in but at some point it says connection denied -- default rule -- I can't figure out what this default rule is that ISA is using to denied the connection. Andrew -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Tuesday, February 01, 2005 12:31 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: OWA or ISA issue? http://www.ISAserver.org Review the ISA logs for those requests. Q1 - is ISA receiving them at all? Q2 - if so, what is the ISA response? Q3 - if the ISA is attempting to communicate with the published server, what is the result-code for that connection? ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 01, 2005 09:14 To: [ISAserver.org Discussion List] Subject: [isalist] OWA or ISA issue? http://www.ISAserver.org I followed word for word Tom's write up on : ISA Server 2004/Exchange Server Deployment Kit: Publishing Secure Microsoft Outlook Web Access Sites : and I am unable to get OWA with SSL working. I get "page can not be displayed". If I https to my site : mail.leathalproductions.com I get the CA window popping up which I agree to but then I get "page can not be found". My first thought was since Tom's notes don't make any mention of having to enable Forums on the OWA site (in Exchange) that I would enable them; which I did; then I restarted the IIS service and tried again without any success. I am gong to post this info in the ISA forum just in case it's an ISA issue and not an Exchange issue?? I am open to suggestions. Andrew ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mats.hellman@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: isalist@xxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: mats.hellman@xxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx