http://www.ISAserver.org ------------------------------------------------------- Hi, One thing with this is that whichever scenario I use, the Exchange remote connectivity test tool passes on all counts. Thanks. Andrew. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew Hodgson Sent: 03 April 2009 13:38 To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Question about forms mode authentication for OWA Hi all, I have successfully got OWA and ActiveSync working using form based authentication. However, there is a problem with the Outlook Anywhere rule: If I set the Outlook anywhere rule to allow all users to connect, and allow clients to authenticate with the published application (thus negating the ISA authentication), everything works perfectly. However, If I choose Basic authentication in the Authentication Delegation tab of the OA publishing rule, then set it so that only authenticated users can connect, Outlook gives an error regarding not being able to find an encrypted connection to the Exchange server. Basic authentication is chosen for the OA on the CAS server. I did think about using NTLM authentication, but as users will use basic authentication either internally or externally (since the OA users are not joined to the domain), I wanted the internal and external view to be the same. Thanks. Andrew. -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Steven Comeau Sent: 02 April 2009 16:04 To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Question about forms mode authentication for OWA http://www.ISAserver.org ------------------------------------------------------- I do it and just have a different rule, however, I use the same listener and IP. Steve Comeau Associate Director of IT Rutgers Athletics 83 Rockafeller Road Piscataway, NJ 08854 732-445-7802 732-445-4623 (fax) www.scarletknights.com -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Moore, Scott A. Sent: Thursday, April 02, 2009 10:54 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Question about forms mode authentication for OWA http://www.ISAserver.org ------------------------------------------------------- Separate rules, same listeners and IP. This should give you a primer for everything you need to setup and best practices. http://www.isaserver.org/tutorials/Publishing-Exchange-2007-OWA-Exchange-ActiveSync-RPCHTTP-using-2006-ISA-Firewall-Part1.html -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew Hodgson Sent: Thursday, April 02, 2009 10:40 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Question about forms mode authentication for OWA http://www.ISAserver.org ------------------------------------------------------- Hi, I have an ISA Server 2006 SP1 server set up to publish an Exchange OWA instance (running Exchange 2007). I am testing using the forms mode authentication through the ISA box. If I use forms mode on an external web listener, is it correct that the ActiveSync and Outlook Anywhere will not work with this, and that I would need to use a different web listener for these methods? If that is the case, do I need to use another external IP address on the web listener for the ActiveSync/RPC stuff? Thanks. Andrew. -- allpay Limited, Fortis et Fides, Whitestone Business Park, Whitestone, Hereford, HR1 3SE. On 5th March 2009, allpay.net Limited changed its name to allpay Limited. Registered in England No. 02933191. UK VAT Reg. No. 666 9148 88. Telephone: 0870 243 3434, Fax: 0870 243 6041. Website: www.allpay.net Email: enquiries@xxxxxxxxxx This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom it is addressed. If you have received this email in error please notify the allpay.net Information Security Manager at the number above. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx *** This message contains confidential information and is intended only for the individual named. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. Rutgers University - DIA 83 Rockafeller Road Piscataway, NJ 08854 www.scarletknights.com *** ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx