This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF Exchange Server 2003

Hi after the upgrade on a SG135 UTM Outlook Web access stopped working.

Ther Exchange server is part of SBS 2003. after the upgrade we get this message

Proxy Error

The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /exchange.

Reason: Error reading from remote server

2017:05:17-22:54:00 COLORFOTO-UTM01 reverseproxy: [Wed May 17 22:54:00.575738 2017] [proxy_http:error] [pid 19032:tid 3836775280] (103)Software caused connection abort: [client 5.249.34.179:54811] AH01102: error reading status line from remote server 10.0.11.1:443

2017:05:17-22:54:00 COLORFOTO-UTM01 reverseproxy: [Wed May 17 22:54:00.575775 2017] [proxy:error] [pid 19032:tid 3836775280] [client 5.249.34.179:54811] AH00898: Error reading from remote server returned by /Microsoft-Server-ActiveSync

I know its a pretty old server and we are in the process of upgrading to 2016, but meanwhile everyone stopped to get email on their mobiles and tablets.

This just happend after the upgrade.

Thanks in advance

Paulo

This thread was automatically locked due to age.

Parents

0 BAlfson over 7 years ago

Paulo, sometimes an Up2Date process damages the configuration. What happens if you restore the configuration backup made just prior to the last application of Up2Date(s)?

If that doesn't solve the problem, try creating a new Virtual Server with new Firewall Profile and new Real Server that duplicate what you have.

Any luck with either of those?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 7 years ago

Paulo, sometimes an Up2Date process damages the configuration. What happens if you restore the configuration backup made just prior to the last application of Up2Date(s)?

If that doesn't solve the problem, try creating a new Virtual Server with new Firewall Profile and new Real Server that duplicate what you have.

Any luck with either of those?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Paulo Rocada over 7 years ago in reply to BAlfson

Thanks BAlfson for the suggestion. Tried both of them with no success. I have passed this to support with no reply at the moment.

Meanwhile the customer is using VPN's from all the devices they want to access email.

I am suspecting of some kind of incompatibility between IIS in 2003 and the new WAF.

Thanks Paulo
Cancel
Vote Up 0 Vote Down

Cancel
0 PeterRL over 7 years ago in reply to Paulo Rocada

Hi Paulo,

having the same problem with 2003. Did support advance you with the reason about this?
Cancel
Vote Up 0 Vote Down

Cancel
0 PeterRL over 7 years ago in reply to PeterRL

Contacted support.

The problem is related to the cyphers used in IIS of the legacy OS. You have to a) Upgrade OS or b) Downgrade UTM version.

--EDIT-----

from support:

"The reason the behaviour is occurring is that UTM v9.5 no longer supports the RC4 Cipher with TLS 1.0 as it is deprecated and has been removed from WAF.

We still support TLS 1.0 but no longer support the RC4 cipher."
Cancel
Vote Up 0 Vote Down

Cancel
0 Christoph Gächter over 6 years ago in reply to PeterRL

I could fix this with

https://www.nartac.com/Products/IISCrypto

Run the "Best Practive" config
Cancel
Vote Up 0 Vote Down

Cancel