Exchange - Edge Transport communication failure

[timlineuk]

Got a big problem where mail is hitting our edge transport server but isn't being passed to the CAS.

This has only been identified today but seems to have been a problem since last Friday.

The only change to both the CAS and EDGE were windows updates but these were applied on the Monday of last week and all mail flow was fine after their respective reboots.

 

The setup is exchange 2007 EDGE and a 2010 CAS (don't comment, i inherited this setup and haven't had the time to change it yet)

 

 

EDGE is giving the event error "Outbound direct trust authentication failed for certificate CN="CAS". the target IP address of the exchange server that exchange tried to authenticate to is [x.x.x.x]. Make sure EdgeSync is running properly.

 

CAS is giving the error "edgesync service cannot connect to this subscription because of error "No EdgeSync credentials were found for edge transport server..."

 

 

I've removed and re-added the edge transport server as an edge subscription but get the same error.

 

My thought is that something like a certificate has expired but there's not obvious indication of this.

 

Both servers have also been rebooted.

 

 

any assistance is as always greatly appreciated!

[timlineuk]

OK, a step further forward - we have communication thanks to this guidehttps://fawzi.wordpress.com/2008/04/11/edgesync-credentials-not-found-for-edge-transport/

 

But now the queue viewer gives me the error - 451 4.4.0 Primary target ip address responded with: 421 4.2.1 Unable to connect...

[timlineuk]

All working now - I've no real idea what sorted things annoyingly but it could have been that things just happened in a better order or that when some things were done a gap was required before performing the next step.

 

A few things that i did that may help out someone in a similar situation:

Regenerated the self signed certificate (link in above post)

Removed the roll up update that was applied a week ago

Removed the send connectors

Renewed the edge subscription

 

After doing all that and restarting the transport services mail flow started again!

 

Just a couple of bits to tidy up now but all seems fine