Exchange OWA Access through Web Application Firewall

RE: Exchange OWA Access through Web Application Firewall

Jammy — Thu, 15 Aug 2019 09:57:34 GMT

[quote user="Jnurse"]

Evianne

Jnurse

Hi,

Tried this and no luck. Here are the logs for when I tried;

Next step would be to disable Reverse Authentication.

This helps you to make sure, that you can authenticate with Basic Auth over the WAF at your Exchange.

Hi,

If I remove the authentication profile from all the virtual webservers then I am able to get to OWA and authenticate successfully so something is going wrong with the authentication pass-through I assume....

Thanks,

James

[/quote]

Although I can't seem to use the Outlook mobile app as I get 'Login error' and the following appears in the log;

community.sophos.com/.../Web-application-firewall3.txt

RE: Exchange OWA Access through Web Application Firewall

Jammy — Thu, 15 Aug 2019 09:19:26 GMT

[quote user="Evianne"]

Jnurse

Hi,

Tried this and no luck. Here are the logs for when I tried;

Next step would be to disable Reverse Authentication.

This helps you to make sure, that you can authenticate with Basic Auth over the WAF at your Exchange.

[/quote]

Hi,

Thanks,

James

RE: Exchange OWA Access through Web Application Firewall

Evianne — Thu, 15 Aug 2019 09:13:23 GMT

[quote user="Jnurse"]

Hi,

Tried this and no luck. Here are the logs for when I tried;

[/quote]

Next step would be to disable Reverse Authentication.

This helps you to make sure, that you can authenticate with Basic Auth over the WAF at your Exchange.

RE: Exchange OWA Access through Web Application Firewall

Jammy — Thu, 15 Aug 2019 08:51:42 GMT

[quote user="Evianne"]

Hi,

you got a lot of errors like ' [client 52.125.138.122:40866] Client is listed on DNSRBL black.rbl.ctipd.astaro.local' in your logs.

Make an exception for this IP (or your network) for 'Block clients with bad reputation' and test again.

Best,

Sabine

[/quote]

Hi,

Tried this and no luck. Here are the logs for when I tried;

community.sophos.com/.../Web-application-firewall2.txt

RE: Exchange OWA Access through Web Application Firewall

Evianne — Thu, 15 Aug 2019 07:12:02 GMT

Hi,

Best,

Sabine

RE: Exchange OWA Access through Web Application Firewall

Jammy — Wed, 14 Aug 2019 19:25:51 GMT

[quote user="Alexander Busch"]But this KB never said do authentication via UTM.

I think that is the problem. Try to do the authentication on Exchange/IIS. This should help.

Best regards

Alex

[/quote]

It said optional was to use 'basic' or 'form' pass through. If I turn authentication off for the webserver then I get access denied message and no option to authenticate with owa

RE: Exchange OWA Access through Web Application Firewall

Alexander Busch — Wed, 14 Aug 2019 19:06:30 GMT

But this KB never said do authentication via UTM.

I think that is the problem. Try to do the authentication on Exchange/IIS. This should help.

Best regards

Alex