Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

SSL for OWA outside access only

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2007] >> Secure Messaging >> SSL for OWA outside access only Page: [1]
Login
Message << Older Topic   Newer Topic >>
Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM
TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!
SSL for OWA outside access only - 1.Aug.2008 1:17:03 PM   
mocetech

 

Posts: 2
Joined: 1.Aug.2008
Status: offline
I am using Server 2008 with Exchange 2007 and Outlook 2007.

I have an SSL certificate from Network Solutions that I have successfully installed on my mail server. It is assigned to "mail.mydomain.com" and it appears to be working just fine using OWA from outside of the office.

However, for machines on our local network using Outlook configured to use exchange, I get the message saying that the security certificate refers to a different address. It seems the local clients are looking for the local DNS address which is different than the external DNS address.

I don't need SSL enabled in the first place for the local machines, so my question is how do I configure the server to use SSL *only* for outlook web access and NOT use it internally on exchange. So far what I've done is go into the IIS manager and disable SSL for the Default Web Site, Exadmin, Exchange, and Exchweb and only enable it for OWA, but I still have the same problem.

I can find resources regarding Server/Exchange 2003, but it seems to be very different in 2007 or doesn't cover exactly what I'm describing.

All help much appreciated! Thanks!
-Nick Marino
Post #: 1
RE: SSL for OWA outside access only - 1.Aug.2008 5:22:28 PM   
Elan Shudnow

 

Posts: 576
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline
What you can do is set the Exchange 2007 Server's OWA directory to not require SSL but still accept SSL.  You can then allow internal clients to either use owa without http or with https from the inside.  From the outside, disallow the use of http to your Exchange box and only allow https.  There's quite a few more options you can do with ISA such as http to https redirection, etc..

_____________________________

Elan Shudnow
http://www.shudnow.net

(in reply to mocetech)
Post #: 2
RE: SSL for OWA outside access only - 1.Aug.2008 7:57:06 PM   
John Weber

 

Posts: 588
Joined: 20.Apr.2005
From: Portland, Oregon
Status: offline
I think the answer is here...

http://tsoorad.blogspot.com/2008/01/outlook-2007-certificate-error.html


_____________________________

-jmw
http://tsoorad.blogspot.com

(in reply to mocetech)
Post #: 3
RE: SSL for OWA outside access only - 1.Aug.2008 8:11:02 PM   
Elan Shudnow

 

Posts: 576
Joined: 4.Jan.2007
From: Chicago, IL
Status: offline
quote:

ORIGINAL: John Weber

I think the answer is here...

http://tsoorad.blogspot.com/2008/01/outlook-2007-certificate-error.html



I love how I posted right before you and you link to your page which contains information from my blog.  Classic! And the reason that's classic is because I didn't properly read his entire post and you basically answered his question with a blog article I wrote.

< Message edited by Elan Shudnow -- 1.Aug.2008 8:13:56 PM >


_____________________________

Elan Shudnow
http://www.shudnow.net

(in reply to John Weber)
Post #: 4
RE: SSL for OWA outside access only - 4.Aug.2008 5:23:39 PM   
mocetech

 

Posts: 2
Joined: 1.Aug.2008
Status: offline
Excellent! Your article was a big help. After a lot of tweaking and thinking, it all works.

Just to note though, on the last few commands, some (I forget which now) displayed an error saying the perameters defining the authentication weren't part of that command. I left out those parts and then it worked fine. I wish I could be more specific, but I was in such a rush I couldn't really take notes on it.


Thanks again, you saved my ass!

(in reply to Elan Shudnow)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2007] >> Secure Messaging >> SSL for OWA outside access only Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts