OWA https works internally via IP Address but not externally.

OWA worked fine with http://mail.Server_Name.com/exchange address but
I decided to make it "https" instead. It works fine internally if we
go to https://IP Address/exchange but it I try to go to it using
https://mail.Server_Name.com/exchange it now displays "Page cannot be
found". Please help...

These are the steps I used:

System Manager -> Admin Groups -> Server -> Server_Name -> Protocols -
> HTTP -> Right click Exchange Virtual Server -> Settings and placed a
check in Enable form based authenication -> ok.

IIS -> Website -> Rightclick Default Website and choose Properties,
Directory Security tab -> Server Certicates -> First -> Send the
request ->Next to the end.

Right clicked on Exchange in deault Websites and choose Properties ->
Directory Security -> Secure Communications -> checked Require Secure
Channel & Require 128, apply and OK.

I am using Server 2003 and Exchange 2000, thanks in advance for any
help.

Javier

Lee
Mon May 14 16:16:58 CDT 2007

<jcortez@travdyn.com> wrote in message
news:1179176220.190826.9120@o5g2000hsb.googlegroups.com...
> OWA worked fine with http://mail.Server_Name.com/exchange address but
> I decided to make it "https" instead. It works fine internally if we
> go to https://IP Address/exchange but it I try to go to it using
> https://mail.Server_Name.com/exchange it now displays "Page cannot be
> found". Please help...
>
> These are the steps I used:
>
> System Manager -> Admin Groups -> Server -> Server_Name -> Protocols -
>> HTTP -> Right click Exchange Virtual Server -> Settings and placed a
> check in Enable form based authenication -> ok.
>
> IIS -> Website -> Rightclick Default Website and choose Properties,
> Directory Security tab -> Server Certicates -> First -> Send the
> request ->Next to the end.
>
> Right clicked on Exchange in deault Websites and choose Properties ->
> Directory Security -> Secure Communications -> checked Require Secure
> Channel & Require 128, apply and OK.
>
> I am using Server 2003 and Exchange 2000, thanks in advance for any
> help.
>
> Javier

Did you also forward the correct port number (443) at your router?

Lee.

--
___________________________________

Outlook Web Access for PDA and WAP:
www.leederbyshire.com
___________________________________

Leif
Mon May 14 16:20:27 CDT 2007

Hi,

Did you install the certificate on the server?

The fqdn on the certificate is the same name as you enter in the browser?

Try to remove the enable forms based authentication and see if that helps.

Just curious - Exchange 2000 on windows 2003????

Leif

<jcortez@travdyn.com> wrote in message
news:1179176220.190826.9120@o5g2000hsb.googlegroups.com...
> OWA worked fine with http://mail.Server_Name.com/exchange address but
> I decided to make it "https" instead. It works fine internally if we
> go to https://IP Address/exchange but it I try to go to it using
> https://mail.Server_Name.com/exchange it now displays "Page cannot be
> found". Please help...
>
> These are the steps I used:
>
> System Manager -> Admin Groups -> Server -> Server_Name -> Protocols -
>> HTTP -> Right click Exchange Virtual Server -> Settings and placed a
> check in Enable form based authenication -> ok.
>
> IIS -> Website -> Rightclick Default Website and choose Properties,
> Directory Security tab -> Server Certicates -> First -> Send the
> request ->Next to the end.
>
> Right clicked on Exchange in deault Websites and choose Properties ->
> Directory Security -> Secure Communications -> checked Require Secure
> Channel & Require 128, apply and OK.
>
> I am using Server 2003 and Exchange 2000, thanks in advance for any
> help.
>
> Javier
>

jcortez
Mon May 14 19:54:34 CDT 2007

On May 14, 5:20 pm, "Leif Pedersen [MVP]" <Leif.pedersenNO-
S...@get2net.dk> wrote:
> Hi,
>
> Did you install the certificate on the server?
>
> The fqdn on the certificate is the same name as you enter in the browser?
>
> Try to remove the enable forms based authentication and see if that helps.
>
> Just curious - Exchange 2000 on windows 2003????
>
> Leif
>
> - Show quoted text -

I installed a certificate named CA on the server.

I used the same browser address as before but now with
https://mail.domainname.com/exchange. I worked fine before with
http://mail.domainname.com/exchange, now I can only get it to work
internally with the ip address.

I removed enable forms based authentication and still got the same
"Page cannot be displayed" mesage.

Sorry, it's Exchange 2003 (version 6.5 it reads in the about section).

Thanks
Javier

jcortez
Mon May 14 19:57:05 CDT 2007

On May 14, 5:16 pm, "Lee Derbyshire [MVP]" <email a@t leederbyshire d.
0.t c.0.m> wrote:
>
> Did you also forward the correct port number (443) at your router?
>
> Lee.
>
> --
> ___________________________________
>
> Outlook Web Access for PDA and WAP:www.leederbyshire.com
> ___________________________________- Hide quoted text -
>
> - Show quoted text -

Where do I do this in Routing & Remote Access?

Thanks
Javier

Lee
Tue May 15 07:21:44 CDT 2007

<jcortez@travdyn.com> wrote in message
news:1179190625.703849.63060@h2g2000hsg.googlegroups.com...
> On May 14, 5:16 pm, "Lee Derbyshire [MVP]" <email a@t leederbyshire d.
> 0.t c.0.m> wrote:
>>
>> Did you also forward the correct port number (443) at your router?
>>
>> Lee.
>
> Where do I do this in Routing & Remote Access?
>
> Thanks
> Javier

You don't do it anywhere in Exchange - you need to do it on your
firewall/router, if you haven't already done so.

Lee.

--
_____________________________________

Outlook Web Access For PDA, OWA For WAP
www.owapda.com
email a@t leederbyshire d.0.t c.0.m
_____________________________________

jcortez
Tue May 15 10:55:01 CDT 2007

On May 15, 8:21 am, "Lee Derbyshire [MVP]" <email a@t leederbyshire d.
0.t c.0.m> wrote:
> <jcor...@travdyn.com> wrote in message
>
> You don't do it anywhere in Exchange - you need to do it on your
> firewall/router, if you haven't already done so.
>
> Lee.

I have port 443 enabled on the TCP side in the firewall (Symantec
Firewall 200R), do I need to enable it on the UDP as well?

jcortez
Tue May 15 11:12:43 CDT 2007

On May 15, 11:55 am, jcor...@travdyn.com wrote:
> On May 15, 8:21 am, "Lee Derbyshire [MVP]" <email a@t leederbyshire d.
>
> 0.t c.0.m> wrote:
> > <jcor...@travdyn.com> wrote in message
>
> > You don't do it anywhere in Exchange - you need to do it on your
> > firewall/router, if you haven't already done so.
>
> > Lee.
>
> I have port 443 enabled on the TCP side in the firewall (Symantec
> Firewall 200R), do I need to enable it on the UDP as well?

I tried this and nothing.. I am really lost here.. any help would be
appreciated.

Javier
800 257-5767 X532

jcortez
Tue May 15 12:23:16 CDT 2007

I believe I got it... but need assistance.

The common name I gave the certificate was CA should I have called it
"Mail.Domain.Com" ?

Thanks
Javier

jcortez
Tue May 15 13:47:41 CDT 2007

Nope that didn't do it...

I am officially lost, please help.

Javier

Leif
Tue May 15 13:45:27 CDT 2007

Hi,

That is correct - the common name on the certificate should be the same as
the mailservers name in the public dns (mail.domain.com).

Leif

<jcortez@travdyn.com> wrote in message
news:1179249796.373731.181260@y80g2000hsf.googlegroups.com...
>I believe I got it... but need assistance.
>
> The common name I gave the certificate was CA should I have called it
> "Mail.Domain.Com" ?
>
> Thanks
> Javier
>

Lee
Wed May 16 07:52:13 CDT 2007

<jcortez@travdyn.com> wrote in message
news:1179254861.460646.89590@e65g2000hsc.googlegroups.com...
> Nope that didn't do it...
>
> I am officially lost, please help.
>
> Javier

You should check to see if the external requests are actually reaching the
server. Have a look at your IIS Log files in
C:\Windows\System32\LogFiles\W3SVC1 . Open the latest one in Notepad, and
take some time to get familiar with the entries. Note that the times are in
GMT. You should be able to see internal OWA requests (since that seems to
be working okay) - but can you see corresponding entries for the external
requests?

Lee.

--
_____________________________________

Outlook Web Access For PDA, OWA For WAP
www.owapda.com
email a@t leederbyshire d.0.t c.0.m
_____________________________________