This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Publish Exchange 2010: no luck...

I'm trying to publish Exchange 2010 (fully patched). UTM version: 9.315-2.

I had no luck with the manual by Sophos, nor with the manual found on winsec.nl.

So I decided to try to publish Exchange without any firewall profiles. No success, too.

What I've done: created a "Physical Web Server", then created a "Virtual Web Server" without a firewall profile. Virtual web server uses the same certificate, which Exchange uses, having following names:

o.domain.com
autodiscover.domain.com
exchangeserver.domain.lan (internal server name in AD)
exchangeserver

The settings of the Virtual Server: "Pass Host Header" = on.

OWA: working.
OMA: Outlook can't connect.
Android devices: working.

Microsoft Connectivity Analyzer can't connect to autodicsover.

"A Web exception occurred because an HTTP 417 - ExpectationFailed response was received from Unknown."

Please, could someone help me?

This thread was automatically locked due to age.

0 kaufcc over 9 years ago

Oh, forgot to tell: if I just NAT to the Exchange server, it works perfectly. But I would like to publish it with UTM.

Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

What do you see in the Web Application Firewall log when you generate that error?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 kaufcc over 9 years ago

I see the following. Sorry, can't format the text to a better form...

2015:09:06-20:52:43 reverseproxy: id="0299" srcip="134.170.52.123" localip="my.external.ip.address" size="364" user="-" host="134.170.52.123" method="POST" statuscode="417" reason="-" extra="-" exceptions="-" time="3939" url="/Autodiscover/Autodiscover.xml" server="o.domain.com" referer="-" cookie="-" set-cookie="-"
2015:09:06-20:54:19 reverseproxy: id="0299" srcip="134.170.52.123" localip="my.external.ip.address" size="0" user="-" host="134.170.52.123" method="OPTIONS" statuscode="200" reason="-" extra="-" exceptions="-" time="13487" url="/Autodiscover/Autodiscover.xml" server="o.domain.com" referer="-" cookie="-" set-cookie="-"
2015:09:06-20:54:20 reverseproxy: id="0299" srcip="134.170.52.123" localip="my.external.ip.address" size="364" user="-" host="134.170.52.123" method="POST" statuscode="417" reason="-" extra="-" exceptions="-" time="3849" url="/Autodiscover/Autodiscover.xml" server="o.domain.com" referer="-" cookie="-" set-cookie="-"
Cancel
Vote Up 0 Vote Down

Cancel
0 kaufcc over 9 years ago

Does anybody have an idea?
Cancel
Vote Up 0 Vote Down

Cancel
0 Hallowach2 over 9 years ago

Hm, I'm not sure if rpc over https is working if you have no firewall profile, because the firewall profile is the place to enable it ('pass outlook anywhere'). So maybe a firewall profile is needed.

Regards
Manfred
Cancel
Vote Up 0 Vote Down

Cancel
0 kaufcc over 9 years ago

Will try it. I thought, first to try the direct way and then try the firewall rules.

Danke Manfred [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 kaufcc over 9 years ago

This howto (in German) helped me: https://www.frankysweb.de/exchange-2013-sophos-utm-9-3-waf-als-reverse-proxy-fr-outlook-anywhere-owa-activesync-und-autodiscover/

The essential part: you do need a firewall profile, because only having a firewall profile you are able to "Pass Outlook Anywhere".
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 9 years ago

There's also the Sophos KnowledgeBase article in English for those that don't understand German: http://www.sophos.com/en-us/support/knowledgebase/120454.aspx

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel