Exchange 2007, ISA 2006 and ActiveSync

[Divaldo]

We are trying to get Exchange 2007 ActiveSync to work externally through ISA 2006 so people can access their info from mobile devices such as iPhones.

 

We've installed it using Verisign SSL certificates and OWA works fine. I can't however get ActiveSync to work. I've tested in on http://www.testexchangeconnectivity.com and get the following results, can anyone help please?

 

Testing Exchange Activesync for host https://mydomain.org.uk/microsoft-server-activesync/

Exchange Activesync test Failed

Test Steps

Attempting to Resolve the host name mydomain.org.uk in DNS.

Host successfully Resolved

Additional Details

IP(s) returned: xxx.xxx.xxx.xxx

 

Testing TCP Port 443 on host mydomain.org.uk to ensure it is listening/open.

The port was opened successfully.

 

Testing SSL Certificate for validity.

The certificate passed all validation requirements.

Test Steps

Validating certificate name

Successfully validated the certificate name

Additional Details

Found hostname mydomain.org.uk in Certificate Subject Common name

 

Validating certificate trust for Windows Mobile Devices

Certificate is trusted and all certificates are present in chain

Additional Details

Certificate is trusted for Windows Mobile 5 and Later platforms. Root = OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US

 

Testing certificate date to ensure validity

Date Validation passed. The certificate is not expired.

Additional Details

Certificate is valid: NotBefore = 6/18/2009 5:00:00 PM, NotAfter = 6/18/2012 4:59:59 PM

 

 

 

Testing Http Authentication Methods for URL https://mydomain.org.uk/microsoft-server-activesync/

Http Authentication Methods are correct

Additional Details

Found all expected authentication methods and no disallowed methods. Methods Found: Basic

 

Attempting an Activesync session with server

Errors were encountered while testing the ActiveSync session

Test Steps

Attempting to send OPTIONS command to server

Testing the OPTIONS command failed. See Additional Details for more info

Additional Details

A Web Exception occured because an HTTP 404 - NotFound response was received from ISA

[spc-rocket]

We are trying to get Exchange 2007 ActiveSync to work externally through ISA 2006 so people can access their info from mobile devices such as iPhones.

 

We've installed it using Verisign SSL certificates and OWA works fine. I can't however get ActiveSync to work. I've tested in on http://www.testexchangeconnectivity.com and get the following results, can anyone help please?

 

Testing Exchange Activesync for host https://mydomain.org.uk/microsoft-server-activesync/

Exchange Activesync test Failed

Test Steps

Attempting to Resolve the host name mydomain.org.uk in DNS.

Host successfully Resolved

Additional Details

IP(s) returned: xxx.xxx.xxx.xxx

 

Testing TCP Port 443 on host mydomain.org.uk to ensure it is listening/open.

The port was opened successfully.

 

Testing SSL Certificate for validity.

The certificate passed all validation requirements.

Test Steps

Validating certificate name

Successfully validated the certificate name

Additional Details

Found hostname mydomain.org.uk in Certificate Subject Common name

 

Validating certificate trust for Windows Mobile Devices

Certificate is trusted and all certificates are present in chain

Additional Details

Certificate is trusted for Windows Mobile 5 and Later platforms. Root = OU=Class 3 Public Primary Certification Authority, O="VeriSign, Inc.", C=US

 

Testing certificate date to ensure validity

Date Validation passed. The certificate is not expired.

Additional Details

Certificate is valid: NotBefore = 6/18/2009 5:00:00 PM, NotAfter = 6/18/2012 4:59:59 PM

 

 

 

Testing Http Authentication Methods for URL https://mydomain.org.uk/microsoft-server-activesync/

Http Authentication Methods are correct

Additional Details

Found all expected authentication methods and no disallowed methods. Methods Found: Basic

 

Attempting an Activesync session with server

Errors were encountered while testing the ActiveSync session

Test Steps

Attempting to send OPTIONS command to server

Testing the OPTIONS command failed. See Additional Details for more info

Additional Details

A Web Exception occured because an HTTP 404 - NotFound response was received from ISA

 

- Silly question but have you enabled activesync for a particular user(s)?

 

- also use the same url for activesync as you do for owa. make sure that in the Exchnage management console you have the internal and external URLs correctly defined in the following locations:

 

Server Configuration | Client Access | Exchange ActiveSync's properties.

 

On the isa server use the wizard to publish exchange activesync and make sure that your ISA server 2006 is at SP1 level to fully support SAN certificates.

 

For more info check out this link --> Publishing Exchange 2007 OWA, Exchange ActiveSync and RPC/HTTP using the 2006 ISA Firewall (Part 1) and review all parts (6 in total)

 

 

HTH,

 

Ash.

[Divaldo]

Thanks Ash, it's got it all working now.

 

I altered the ISA config to be NTLM authentication and then in IIS on Exchange set Microsoft-Server_activesync up as integrated windows authentication and it all sprang into life!

 

 

Hooray!

 

I hope you're well.

 

David @ KE7.

[armadillo]

Thanks Ash, it's got it all working now.

 

I altered the ISA config to be NTLM authentication and then in IIS on Exchange set Microsoft-Server_activesync up as integrated windows authentication and it all sprang into life!

 

 

Hooray!

 

I hope you're well.

 

David @ KE7.

 

Hi Divaldo, I am having the same problem when I try to get iphone to synch with exchange 2007 to get emails externally. OWA works fine from PCs but not the iphone or a blackberry. We're running ISA 2000 and exchange 2007. Blackberry used to work fine with exchange 2003 but since the upgrade to exchange 2007 it stopped and can't get iphone to work correctly. I am having to forward users’ email instead of connecting the mobiles to mail accounts.

 

I was told that ISA 2000 doesn't fully support Exchange 2007 that's where the problem lies, is it true?

 

I hope you can help with this- Your help is appreciated.

 

Thanks

[IanT]

I wouldnt think ISA 2000 supports Exchange 2007