This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exchange CBA in combination with SMC EAS-Proxy

Hi,

we would like to use CBA with our Microsoft Exchange Server. So far it works but only if we connect directly against the Exchange server. In order to get CBA working we also had to expose our Exchange server directly to the internet (Sophos UTM WAF discussion, but this ist not topoc here).

We'd like to use the EAS-Proxy function built into SMC but this also seems not to function in combination with CBA, only username & password authentication.

Did I miss something or is it not possible to use CBS in combination with EAS-Proxy?

BR
Chris

This thread was automatically locked due to age.

Parents

0 Alexander Busch over 6 years ago

Hi Chris,

maybe I can take the opportunity to ask a question about CBA, because the topic is still on my ToDo list.

Do you have several Exchange servers or is it possible to offer several authentications (CBA and FBA/Basic) on one server?

If I guess correct via additional ActiveSync Virtual Directory?

Especially during the test period this would be quite nice.

Maybe I can tell you later if CBA works via EAS proxy.

Best regards

Alex

-
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Alexander Busch over 6 years ago

Hi Chris,

maybe I can take the opportunity to ask a question about CBA, because the topic is still on my ToDo list.

Do you have several Exchange servers or is it possible to offer several authentications (CBA and FBA/Basic) on one server?

If I guess correct via additional ActiveSync Virtual Directory?

Especially during the test period this would be quite nice.

Maybe I can tell you later if CBA works via EAS proxy.

Best regards

Alex

-
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Christoph Pelzer over 6 years ago in reply to Alexander Busch

Hi Alex,

maybe you should have a look here: https://docs.microsoft.com/de-de/exchange/plan-and-deploy/post-installation-tasks/configure-certificate-based-auth?view=exchserver-2019

"Step 4: Use the EMS to disable other authentication methods"

Best practice is to disable them, but it also works if you don't do this. Keep in mind it is definitely not recommended and there are lots of sites / forums telling you this has weird side effects.

In my environment I tried everything and when connecting directly to the Exchange server it works fine. But as soon as I use the WAF in our UTM or the EAS in SMC it does not.
Cancel
Vote Up 0 Vote Down

Cancel