rjm

Hi guys, We have just purchased a wildcard certificate to replace our mail. webserver. and portal. sites, as we are going to publish more sites in the future and it seemed more cost effective. However, I am having problems with Exchange OWA. It used to be secured using mail.school.com security certificate, and is now secured using *.school.com However, internally OWA is accessed by the URL https://internalservername/owa - and it states that is a certificate mismatch as the certificate is trying to secure mail.school.com from the wildcard certificate. This is the bit that gets confusing, when using the old mail.school.com certificate on the OWA site, and accessing https://internalservername/owa the site comes up as secured, even though when you click on the padlock it still says its using the mail.school.com certificate - and the name doesnt match the internal server name. Is there somewhere that a trust between the two is setup, and if so how do I add the wildcard ceritificate to also secure the internal servername address. My other throught was for users to browse to the external site name, which does resolve, but then they get prompted for authentication, which when accessing via the internal addresss then don't - presumably due to autodiscover? Thanks for any help!!

Hi mate, I have changed the DNS entries on both connections to point to our two internal DNS Servers. Both internal servers have the external DNS servers for our ISP listed. I have also changed the Metrics in both connections, making the primary connection lower than the secondary redundant connection. The Lan is still priority though. After both of these changes, im still getting the same issue. Mail. works but webserver. doesn't. Disable the redundant connection and webserver. works instantly. I really have no idea what is causing it...

Both external connections and the internal LAN connection are all set to automatic metric. Should I change this? I still cant get my head around why mail. works regardless of the secondary connection, but webserver. doesn't... How can I set the forwarders in DNS when both connections are from different ISPs and therefore use different DNS servers from each other? Thanks for your help with this!

Where can I find the cost? I have looked in the advanced options in network connections, and verified the primary internet connection is above the backup secondary connection, which it is. Both internet connections use the ISP DNS servers relevant to that connection. The internal LAN nic on the TMG server points to our internal DNS servers, which have both mail. and webserver. entries specified. The TMG rule specified the site name and IP Address, and when I run the "Test Rule" I get success and green ticks.

Hi mate, Thanks for your reply. In our Domain DNS I have an "Host A" entry for mail. which runs the OWA, and one for webserver. Also, both names are registered with our domain name provider so resolved on the internet to the relevant external IP addresses. I am looking at Routing in TMG but that seems to be static and just picks up addresses from the NICs in the TMG server. Thanks for your help.

Hi guys, Im after abit more advice. Our TMG server has two internet connections that are in Failover Only mode on the ISP Redundanct Tab. My issue is we cannot access a published web server when both connections are active. When the 2nd reduntant connection is disabled it works instantly. I also have Exchange 2007 OWA published through the same TMG server, but access to this works regardless of the 2nd connection being active. Now the external IP address for the site in question is linked to the Primary network connection, as is the OWA, so I cant understand why having the 2nd redundant connection active would cause the published site not to work. I have compared both access rules for OWA and the published site and they are the same, other than the details of ther server they are hosted on, and their relative host names etc. One last thing, when I remove the gateway address from the 2nd redundant connection, it works instantly, so it appears the request comes in using the external IP through the primary internet connection, but then tries to reply and go out on the 2nd redundant connection causing it to time out. Any ideas would be greatly appreciated. Cheers Rich

Sorted mate - thanks for your help!!

Yes ive done a rule, so far the setup is: Action: Allow Traffic: Allow RDP (Terminal Services) Server From: (External IP) To: (Internal IP) Networks: External Thanks

Morning all, Im after abit of advice. I need to allow a remote desktop connection from the internet to one of our Windows 7 PCs on our internal network, that is secured using TMG 2010. I have got an external IP dedicated to the job, but I cant get a configuration to allow a connection through the TMG, however I can get a remote desktop connection to the TMG itself via the net, just not though it to an internal PC. Has anyone tried this/got any advice? Thanks in advance!

Hi there, I am trying a write a VB Script to do the following: Check if a folder exists - if it doesn't END - If it does check if two files exist within it - if they do END - if they don't, copy the two files Basically I want to check that two files exist within a folder of some software that might be installed. I want to copy the two files if the software is installed, but not if the software isnt installed. Hope that makes sense, and any help is greatly appreciated. Many thanks!

Hi guys/girls Im abit stuck with creating a transform for Java Update 23/24. I want to add some network settings - a proxy server address and port as the way our network has been setup, java cant use the default browser settings as its setup just to Automatically detect settings. When I manually set the proxy server details in the Java control panel, it works fine, but I want to set this as the MSI is deployed rather than doing the manual change on every machine. Any help/pointers would be appreciated! Cheers

Name : ContentFilterConfig RejectionResponse : Message rejected as spam by Content Fil tering. OutlookEmailPostmarkValidationEnabled : True BypassedRecipients : {} QuarantineMailbox : SCLRejectThreshold : 7 SCLRejectEnabled : True SCLDeleteThreshold : 9 SCLDeleteEnabled : False SCLQuarantineThreshold : 9 SCLQuarantineEnabled : False BypassedSenders : {[email protected]} BypassedSenderDomains : {} Enabled : True ExternalMailEnabled : True InternalMailEnabled : False AdminDisplayName : ExchangeVersion : 0.1 (8.0.535.0) DistinguishedName : CN=ContentFilterConfig,CN=Message Hygie ne,CN=Transport Settings,CN=Company, CN=Microsoft Exchange,CN=Services,CN=Co nfiguration,DC=Company,DC=local Identity : ContentFilterConfig Guid : ObjectCategory : company.local/Configuration/Schema/m s-Exch-Message-Hygiene-Content-Filter-C onfig ObjectClass : {top, msExchAgent, msExchMessageHygiene ContentFilterConfig} WhenChanged : 24/02/2011 14:39:01 WhenCreated : 18/12/2008 15:57:06 OriginatingServer : server.company.local IsValid : True

Ive added that line using the shell command and its made no difference. Ive opened one of the emails in Outlook that has landed in the Junk Email folder, and it says "This message was marked as spam using the Outlook Junk E-Mail filter" at the top of the message. - Any help?

In the helpdesk configuration, it asks for the name of your exchange server(s) and the mailbox to use, and then you can verify the connection, which I have done. That bit is working as the emails send.

We don't have an Edge server at this college, everything is done using the same box. I suspect that the SCL rating is why some messages are getting transferred to Junk and some are not, even though they have the same email address, the content varies depending on the call contents. As ive only really used the console and not the shell im not very familiar with the shell commands, but seem to remember there is a test command to check the result before you action the command to implement the change. Is the above command in " marks a test command? All help with this is appreciated. Cheers