Exchange 2003 Internal Authentication - BYOD

[Eben]

We have an exchange server 2003 (soon to be 2010) running internally and published through TMG for external access and would like to publish the exchange server to our staff/student BYOD vlan. We have openned ports 80 and 443 from the BYOD vlan to the exchange server on the ACL, we can browse to exchangeserver/exchange on port 80 internal in the web browser and see webmail. I have also created an internal DNS redirect for the external webmail.domain.com to the IP of the internal exchange server but active sync fails to connect. Assuming we need to setup something like TMG to listen and publish OWA internal.

 

What is the best way to achieve what we are looking for.

[FN-GM]

You wont need TMG. I would also not use port 80. Just use SSL port 443. Exchange 2003 is really old now. I have found that newer devices that require Autodiscover so not work properly with Exchange 2003.

[Eben]

How easy is it to change exchange from 80 to 443.. is this likely to mess with TMG web publishing?

 

Also any advice on upgrading to 2010?

[FN-GM]

Probably will mess with TMG. Do you have a certificate installed on your exchange? If you use port 80 the traffic is not encrypted.

[Eben]

We have a wildcard cert installed on TMG but AFAIK not on 2003 exchange.

[FN-GM]

We have a wildcard cert installed on TMG but AFAIK not on 2003 exchange.

 

Does it have an exportable key? If so you could export it from TMG and import into 2003.

[Eben]

It is exportable - jiut upgrade from ISA 2006 to TMG using it but the cert is for our domain.co.uk not internal domain.local