+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Internet Related/Filtering/Firewall Thread, Outlook2003 behind ISA2006 issue in Technical; Hi Does anyone know how to config Outlook2003 behind ISA2006 to access Outlook Live. I've created access rules & allowed ...
  1. #1

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Unhappy Outlook2003 behind ISA2006 issue

    Hi
    Does anyone know how to config Outlook2003 behind ISA2006 to access Outlook Live. I've created access rules & allowed IMAP SMTP POP IMAPS SMTPS from my test client pc. I've tried installing the firewall client but access still fails.

    How does access perform name resolution?

    Outlook seems to be using https port 443 to access Outlook Live & it is being blocked! I dom't see any IMAP or SMTP protocols being used.

    can anyone help

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Outlook is probably using Outlook Anywhere or RPC over HTTPS to tunnel the outlook communications to the Outlook Live server. Outlook does not use POP3 or IMAP when connecting to an Exchange server but rather its own protocol which for internet use is tunneled through HTTPS.

  3. #3

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Https tunnel ports

    Thanks for the info,
    You think Outlook 2003 is trying to tunnel rpc using https to connect to Outlook Live servers. If I extend to default range of https from 443 & 563 (NNTPS) would this open the ISA to all RPC traffic on our windows network?

  4. #4

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Had a similar issue with Outlook connecting to Live@edu through ISA2006, I installed Outlook 2007 with does manage eventually to breakthrough the isa after attempting many different connection methods. Our problem is the client authentication is not being passed to the web proxy service at all.

  5. #5

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    We have the same issue with ISA2006 & Outlook 2007, it eventually connects to live@edu.

    Does anyone have an answer why the user authentication is not passed to the web proxy filter. I have tried with & without the firewall client installed & the firewall client settings in ISA "connections tab" set outlook.exe dissable to O & also tried setting it to 1 but still not working??

    Very frustrating!!

  6. #6

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    78
    Hi

    Just clarify what are you trying to do?

    Are you trying to use Outlook 2007 behind ISA2006 to connect to live@edu?

    Sukh

  7. #7

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Hi Sukh

    Yep, thats it exactly as you put it in your post.

    Harvester

  8. #8

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    78
    So the issue is that the user gets prompted for credentials constantly or it's not working at all?

  9. #9

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    The user gets prompted for live@edu credentials but thats not a big prob for us as the user eventually authenticates with live@edu through HTTP. But this is only after the traffice passing through the ISA has been denied for various transport methods. eg,

    This is for the 1st attempt to access pod*****.outlook.com:443 with "SSL-Tunnel"
    Client Agent MSRPC
    Log type: Web Proxy (Forward)
    Status: 995 The I/O operation has been aborted because of either a thread exit or an application request .

    After 4 or 5 attempts using this it tries:
    Client Agent MSRPC
    Log type: Web Proxy (Forward)
    Status: 12209 The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied.

    Then:
    Client agent: Microsoft Office/12.0 (Windows NT 5.1; Microsoft Office Outlook 12.0.6529; Pro)
    Log type: Web Proxy (Forward)
    Status: 302 Moved Temporarily
    Request: GET http://autodiscover.DomainName/autod...todiscover.xml

    And Phew, that is finally successful
    (Hope this helps)

  10. #10

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    78
    Are you using autodiscover for live@edu. Is this how Outlook is configured?

  11. #11

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    yes outlook is set to get auto configure , & gets the xml file to config outlook. (thats fine) If I set outlook to authenticate, ntlm or kerberos the login box keeps popping up & authentication fails!!!

  12. #12

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    hi
    Just removed ticks from boxes outlook >MS exchange > security settings for "encryption & user Identification"
    That has stopped all the extra traffic being generated but, has it stopped the encrypted connection between the Outlook Client & Live@edu mail box??

  13. #13

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    78
    Hi

    I've been given a link which I'd like you'd to see.

    Forefront Threat Management Gateway 2010 Autodiscover issue - Outlook Live Answers

    Sukh

  14. #14

    Join Date
    Jan 2010
    Posts
    16
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks Sukh

    I'm back in school today & had a look at the url & tried the suggestion which did not work?

  15. #15

    Join Date
    Dec 2008
    Location
    Essex
    Posts
    2,144
    Thank Post
    1
    Thanked 326 Times in 316 Posts
    Rep Power
    78
    Are you still getting the authectication prompts? Are the users eventually going through and getting access?



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. publishing sharepoint via ISA2006
    By HMCTech in forum Virtual Learning Platforms
    Replies: 5
    Last Post: 23rd January 2009, 03:35 PM
  2. Hotmail and Outlook2003
    By Athlona in forum Wireless Networks
    Replies: 17
    Last Post: 19th December 2008, 01:02 PM
  3. ISA2006 logging client usernames
    By adamf in forum Windows
    Replies: 1
    Last Post: 30th April 2008, 09:34 PM
  4. ISA2006... Last one from Microsoft
    By ranj in forum Windows
    Replies: 3
    Last Post: 17th April 2008, 11:39 PM
  5. Logon issue and Printers issue
    By mrbios in forum Windows
    Replies: 2
    Last Post: 17th December 2007, 01:40 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •