Hi Together,
to deny access to unmanaged devices we need to change the EAS proxy to Powershell. This article describes how to setup: Set up email access control through PowerShell - Sophos Mobile
There are only a few steps to connect. The EAS Proxy wizard finished the steps with success, where he tests the PowerShell Connection to the Exchange-Server and everything looks fne.
After starting the service the errorlog shows that the EAS Proxy can't connect to Exchange Server anymore.
-----------------------------------
2022-12-28 10:51:10.601 [Timer-2] INFO PowershellEASProxyInstance_exch03.xyz.local - Starting Office 365 Task2022-12-28 10:51:14.622 [Timer-2] ERROR PowerShell_exch03.xyz.local - Error executing Login command: New-PSSession : [exch03.xyz.local] Beim Verarbeiten von Daten vom Remoteserver "exch03.xyz.local" ist folgender Fehler aufgetreten: [ClientAccessServer=EXCH03,BackEndServer=exch03.xyz.local,RequestId=611df702-736f-407b-b26d-08a57df0d7ac,TimeStamp=28.12.2022 09:51:13] [FailureCategory=WSMan-Others] Der WS-Verwaltungsdienst kann die Anforderung nicht verarbeiten. Vorg„nge mit mehreren Meldungen des Clients werden nicht unterst?tzt. Weitere Informationen finden Sie im Hilfethema "about_Remote_Troubleshooting".In Zeile:1 Zeichen:12+ $session = New-PSSession -ConfigurationName Microsoft.Exchange -Conne ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : OpenError: (System.Manageme....RemoteRunspace:RemoteRunspace) [New-PSSession], PSRemotin gTransportException + FullyQualifiedErrorId : -2144108529,PSSessionOpenFailedImport-PSSession : Das Argument f?r den Parameter "Session" kann nicht ?berpr?ft werden. Das Argument ist NULL. Geben Sie einen g?ltigen Wert f?r das Argument an, und f?hren Sie den Befehl erneut aus.In Zeile:1 Zeichen:18+ Import-PSSession $session+ ~~~~~~~~ + CategoryInfo : InvalidData: (:) [Import-PSSession], ParameterBindingValidationException + FullyQualifiedErrorId : ParameterArgumentValidationError,Microsoft.PowerShell.Commands.ImportPSSessionCommand 2022-12-28 10:51:14.622 [Timer-2] ERROR PowershellEASProxyInstance_exch03.xyz.local - The login via Powershell failed. Please ensure the following: This machine is able to connect to the specified host. The proxy settings are setup correctly. The host certificate is trusted. The credentials of the service user are correct.2022-12-28 10:51:14.622 [Timer-2] ERROR PowershellEASProxyInstance_exch03.xyz.local - Office 365 Task failed Error executing command2022-12-28 10:51:16.101 [Timer-0] INFO com.sophos.mobilecontrol.easproxy.server.EASProxyService - Memory statistics: free: 37.29 MB, max: 1024.00 MB, total: 77.00 MB2022-12-28 10:56:16.117 [Timer-0] INFO com.sophos.mobilecontrol.easproxy.server.EASProxyService - Memory statistics: free: 37.29 MB, max: 1024.00 MB, total: 77.00 MB
--------------------------
Things we did:
a) Check the Internet Proxy settings: disbaledb) Connect to the Exchange Server over the Powershell Console with credentials set in the wizard: succesc) Install a fresh Windows Server 2022 with the current EAS Proxy Setup: same resultd) Install a fresh Exchange Server 2019: same result
Which we have noticed but for which we have not found any further evidence. In the article (Set up email access control through PowerShell - Sophos Mobile) is the Exchange 2019 not listed. But all other current Exchange Server - is it a problem with Exchange 2019?
If someone had another idea that would be great.
Best Regards and all a happy new year,Jochen
Hi Jochen,
Thanks for reaching out to the Sophos Community forum.
It looks like Exchange Server 2019 is not currently supported. I suspect this was decided in favor of Office 365, though I was not able to locate any further information as to why this was done.
Allow me some time to inquire internally about this and update you.
Update: Our team clarified that Exchange 2019 is supported for the Sophos EAS Proxy. Our KB articles will be updated in the following days to reflect this.
Hi Kushal,
with the new relased EAS Proxy von 2023 Ver: 9.7.8.77 we have tried to connect to a fresh Exchange 2016.
But we get the same Error. "Das Argument f?r den Parameter "Session" kann nicht ?berpr?ft werden. Das Argument ist NULL. Geben Sie einen g?ltigen Wert f?r das Argument an, und f?hren Sie den Befehl erneut aus.In Zeile:1 Zeichen:18+ "
Do you have any idea?
Best Regards,
Jochen
From the information present in the following article, Exchange 2016 is supported, and this should work correctly.- https://support.sophos.com/support/s/article/KB-000036594?language=en_US
Exchange 2019 is absent from the list, unfortunately. I have followed up with our team now. Exchange 2019 is listed as a Mailserver under "Requirements" in the following release notes page as well, so this will require some clarification.- docs.sophos.com/.../index.htmlUpdate