[isalist] Re: SSL OWA RPC

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 28 Aug 2007 13:43:51 -0700

http://www.ISAserver.org
-------------------------------------------------------
  
The concepts in that blog apply equally to ISA 2004 and 2006, except for
auth delegation (ISA 2004 can only do Basic).
Yes; ISA is doing its job and the test processes in that blog will work
equally well fro ISA 2004.

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of James May
Sent: Tuesday, August 28, 2007 1:38 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC

http://www.ISAserver.org
-------------------------------------------------------
  
Jim,
Does the blog below apply to isa 2004? By the way yes I have a separate
listener for each certificate and there are also using different public
ip's. All seems to work here on my end its only a problem when my user
tries to connect behind the corporate firewall in DC. Not sure why.
Their admin ran the proxy.dll check and he was getting an error message
to contact the isa administrator. The proxy.dll test works fine behind
the firewall. So by what you are telling me the isa2004 sever is doing
its job.

Jim

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Tuesday, August 28, 2007 12:23 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SSL OWA RPC

http://www.ISAserver.org
-------------------------------------------------------
  
I don't see anything that says you have a certificate problem?
If you get the "500" error as a result of testing your RPC over HTTP
publishing with a browser, this is expected.  Have a read here
http://blogs.technet.com/isablog/search.aspx?q=%22testing+RPC%22&p=1.

To answer the question of certificate usage, you can only have one
certificate per web listener.


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of James May
Sent: Tuesday, August 28, 2007 12:11 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] SSL OWA RPC

IS it possible to use 2 different ssl certs on isa 2004 one for https
over rpc and one for OWA

 

I have one cert mail.domain.com  

One for www.domain.com

 

Using 2 different publishing rules. One for www owa and one for the
https over rpc

 

Recently  its been brought to my attention that one of my users cannot
use https over rpc from the main office testing the config using
https://mail.domain.com/rpc/rpcproxy.dll  I get an error message
internal error 500

 

The www.domain.com is the cert on the internal exchange box

 

The isa box is using mail.domain.com cert it seems to work everywhere
except the corporate office however it fails the rpcproxy.dll test.

 

James May

Defense Group Inc

Santa Monia, CA 90401

jmay@xxxxxxxxxx

 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: