Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 4158 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF 9.2 and Exchange 2010

the schwartz
I'm trying to configure WAF for Exchange 2010 in 9.2, and having issues with OWA and ActiveSync. I got OWA working, but the UTM form just redirects to the OWA form; ActiveSync isn't working at all. I've read everything I can find, and I have spoken with my chosen partner as well as Sophos support. 

I've tried following the guide for 9.1 (https://www.winsec.nl/2013/10/11/publishing-exchange-utm-web-application-firewall/) and adding the tweaks by JustinCredible https://community.sophos.com/products/unified-threat-management/astaroorg/f/57/t/50168

When that didn't work, I found a guide for 9.2 and reconfigured to match this document:

https://sophserv.sophos.com/repo_kb/120454/file/Exchange%20WAF%20How%20to%209%202.pdf

Out environment uses mail.domain.com for both OWA and ActiveSync. We are not currently using Outlook Anywhere or Autodiscover, but this is a good time for me to get it all running properly. Additionally, we are using a wildcard certificate, so this may adding some complexity.

Testexchangeconnectivity.com shows the following error for ActiveSync:

An ActiveSync session is being attempted with the server. 
  Errors were encountered while testing the Exchange ActiveSync session. 
  Additional Details 
Test Steps 
  Attempting to send the OPTIONS command to the server. 
  Testing of the OPTIONS command failed. For more information, see Additional Details. 
   
Additional Details 
An HTTP 401 Unauthorized response was received from the server. This may be the result of invalid credentials or a configuration problem on the Exchange Server.
HTTP Response Headers:
Content-Length: 381
Content-Type: text/html; charset=iso-8859-1
Date: Sat, 08 Nov 2014 23:46:48 GMT
Server: Apache
WWW-Authenticate: Basic realm="utm_secure_login"


Any help would be greatly appreciated!


This thread was automatically locked due to age.
  • 0
    Hi,

    I just setup my utm 425 yesterday and used the following guide to setup exchange 2010: https://www.winsec.nl/2013/10/11/publishing-exchange-utm-web-application-firewall/

    We have the same FQDN for OWA and active sync which does not work with the recommended settings. The important step is step 5, the exception for active sync. So far it has worked perfectly.
  • 0 in reply to jsuboh
    Moving to appropriate forum...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0
    I followed that one to the "t," but I guess I'll try it again.
  • 0
    I got OWA working, but the UTM form just redirects to the OWA form


    You have to enable basic authentication on your Exchange server.

    ActiveSync isn't working at all.
    Testexchangeconnectivity.com shows the following error for ActiveSync:
    An HTTP 401 Unauthorized response was received from the server. This may be the result of invalid credentials or a configuration problem on the Exchange Server.


    Did you configure Active Directory or LDAP as authentication servers in WebAdmin? Does authentication work? You can test your credentials in WebAdmin: select Definitions & Users / Authentication Services / Servers, click Edit for your authentication server, put in username and password and click Test.
Unfiltered HTML