This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

how to publish owa and anywhere on one ip address and same certificate - UTM 9.3 sg210

Sophos2015 over 9 years ago

Hi,folks

I tried to publish owa and anywhere (internal exchange server) but I got an error(see attached file.pic1)

The virtual web server domain name 'External (WAN) [192.168.213.167 (OWA)] (Address):443:owa.mydomain.ru' is already in use by the domain list attribute of the virtual webserver object 'Exchange etc services'.

and I found only one way to fix this error - I add the same ip address with new description in Interface&Routing - interfaces-additional addresses

then I edited my virtual web server and changed interface with new settings

after that a I was able to turn on - webserver

is it correct ?

This thread was automatically locked due to age.

Parents

NvA over 9 years ago

With a SAN certificate you are able to use different subdomains and a virtual webserver each.
If you like to use different profiles for the same virtual webserver, you can define one virtual webserver and use different exceptions.
See www.sophos.com/.../120454.aspx
Cancel
Vote Up 0 Vote Down

Cancel
Sophos2015 over 9 years ago in reply to NvA

Thank you NvA for your answer i also used this article - How to configure Sophos UTM Web Application Firewall for Microsoft Exchange Services (new!) but still have a error - In Sophos we have two virtual web servers with one public ip address - one for owa and the another for anywhere how can we turn on both virtual servers? we must use one certificate.
Cancel
Vote Up 0 Vote Down

Cancel
NvA over 9 years ago in reply to Sophos2015

Sophos2015 said:
we must use one certificate.

A SAN (SubjectAltName) certificate is one with more domain names.

I use this (german) tutorial: https://www.frankysweb.de/exchange-2013-sophos-utm-9-3-waf-als-reverse-proxy-fr-outlook-anywhere-owa-activesync-und-autodiscover/

If you don't want to use autodiscover.domain.com (and a second domain name) you should try a DNS srv record for autodiscover. https://support.microsoft.com/kb/940881

_autodiscover._tcp 0 0 443 owa.domain.com will delegate autodiscover to owa.domain.com.

Check with https://testconnectivity.microsoft.com/

Regards Nathan
Cancel
Vote Up 0 Vote Down

Cancel
Sophos2015 over 9 years ago in reply to NvA

Hi, NvA could you put link to tutorial again your your link wrong
Cancel
Vote Up 0 Vote Down

Cancel
NvA over 9 years ago in reply to Sophos2015

Hi Sophos2015,
I modified my entry.
Cancel
Vote Up 0 Vote Down

Cancel
AreshAreshi over 9 years ago in reply to Sophos2015

why do you want to publish your exchange OWA and OA and Active sync all under one profile? this is not recommended.
but said that, it is possible to combine all of the profiles to single one.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

AreshAreshi over 9 years ago in reply to Sophos2015

why do you want to publish your exchange OWA and OA and Active sync all under one profile? this is not recommended.
but said that, it is possible to combine all of the profiles to single one.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data