Andrew, Have you been anywhere close to any of the articles you've been pointed to? You keep trying to shotgun this process and you absolutely cannot do that. Fact: if ISA isn't doing what you think you told it to, then you probably messed it up somewhere. This is a standard Exch deployment and IF you follow the instructions written by half-a-dozen knowledgeable folks, you can get there. Q1 - what have you used to validate that RPC/HTTP is functional inside? By default, OL2K3 will use HTTP ONLY as a fallback protocol to contact the Exch server Q2 - what are the OL2K3 settings you've used to connect to the RPC proxy? -----Original Message----- From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 22, 2005 8:57 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: RPC over HTTP problems http://www.ISAserver.org I have basically pin pointed the issue down to ISA and the rule I think. The PRC proxy works internally. And HTTPS works flawlessly but for some reason the traffic is getting hung at ISA Server. When I monitor the logs all I see now is HTTPS 443 coming in but nothing happens from that point on wards. Except that Outlook is unavailable to find the Exchange Server... Shurg Oh and Outlook /rpcdiag shows outlook trying to connect to Directory, and exchange.domainname.com then both attempts vanish and the error message about not being able to find Exchange Server appears. Andrew -----Original Message----- From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Tuesday, February 22, 2005 11:49 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: RPC over HTTP problems http://www.ISAserver.org I saw it the first time. How the site resolves on the Internet has absolutely no bearing on how it resolves internally. Oranges and roadapples... -----Original Message----- From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 22, 2005 5:44 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: RPC over HTTP problems http://www.ISAserver.org Hi Jim, My last message didn't show up on this thread, wonder why. So here goes again. These people had there server setup as their domainname.local initially, and use their owa.domainname.com for OWA, email ,etc. I recall that there can be issues when using .local as suppose to .com especially when doing RPC over HTTP. Do you have any ideas on what I should do other than rebuilding their entire network? :-) Thanks Andrew ________________________________ From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Tuesday, February 22, 2005 4:42 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: RPC over HTTP problems http://www.ISAserver.org Kb's are your friends: http://support.microsoft.com/search/default.aspx?query=rpc+over+http&cat alog=LCID%3D1033&qryWt=Microsoft+Office+2003&mode=r&cus=False&x=11&y=17 What OS? RPC/HTTP is only supported on WinXP and later. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ <http://isaserver.org/Jim_Harrison/> http://isatools.org <http://isatools.org/> Read the help / books / articles! ------------------------------------------------------- ________________________________ From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 22, 2005 13:30 To: [ISAserver.org Discussion List] Subject: RE: [isalist] RE: RPC over HTTP problems Hi Jim, The client runs Office 2003 Pro, thus Outlook 2003. We are installing SP1 as I type this message and will test it again, but can I be sure that its related to not having SP1? We have the client machine connected to a DSL modem in the same office but non of the traffic goes through the server, it all goes out to over the internet back into the office. Thanks Andrew ________________________________ From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] Sent: Tue 2/22/2005 4:28 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: RPC over HTTP problems http://www.ISAserver.org RPC/HTTP doesn't use the RPC application filter. Any "real" RPC traffic you see is a result of client misconfiguration. What is the client you're using (OS/SP/Office ver / patches)? Where is the client operating from; internal or external to ISA? ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ <http://isaserver.org/Jim_Harrison/> http://isatools.org <http://isatools.org/> Read the help / books / articles! ------------------------------------------------------- ________________________________ From: Andrew English [mailto:andrew@xxxxxxxxxxxxxxxxxxxxxx] Sent: Tuesday, February 22, 2005 13:14 To: [ISAserver.org Discussion List] Subject: RPC over HTTP problems Hi, I have setup RPC over HTTP along with OWA using Tom's Exchange / ISA info. Though I don't think there is any problem with his material I am having a problem wirh RPC. The OWA with SSL works flawlessly. When I setup the log in ISA to only look at the machine that we are using on the external side to connect to RPC over HTTP its able to negoicate with HTTPS on 443 without any problems but the RPC (all interfaces) id denied access by the default rule. I am wondering is there something else I need to set on ISA to enable the RPC protocol to work? Thanks Andrew ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: andrew@xxxxxxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: World of Windows Networking: http://www.windowsnetworking.com Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.