I have installed an Enterprise CA on one of our servers. I went through the process of creating a certificate through the CA and enabled certificates on the default website on the mail server.
If i connect internally to http://mailserver/exchange
however if i connect remotely using http://mail.domain.com/exc
The page must be viewed over a secure channel - http error 403.4
This makes me believe there is a problem with the ISA set up port 443 is forwared to port 443 of the isa server on our router exactly the same as port 80 to port 80 so there should be no issue there.
ive attatched several screenshots of the ISA set up - The isa server can also browse to the https webmail server internally fine. however i get a certificate error that says.
"Mismatched Address - The security certificate presented by this website was issued for a different websites address."
However i think this is just because i set the certificate up under the name of the external DNS address instead of the internal.
isa set up
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
i have created the 2 different rules
now when i browse to http its working ok
if i browse to https i get an error message that says
"Do you want to view only the webpage content that was delivered securely?"
if i click no it works fine
if i click yes it says "navigation to the webpage was canceled" on the left and right frame
The publishing rule for https is not correct. This is normally due to a DNS error where the name resolution screws up from the ISA to the published server.
I assume you have the basics correct?
http://www.kalabaster.com/
yes, i remember you posted that link on another thread of mine about my sharepoint server in a DMZ, so everything is set up like that.
both ISA servers query our internal servers for DNS and only have 1 external gateway.
why would it work for HTTP and not for HTTPS if they are identical apart from the SSL section?
i read a guide on the internet that said i would have to put the mail.mydomain.com into the hosts file with the internal IP address of my exhange server, i have tried this with no luck though.
Does the mail.mydomain.com or .local need an entry in my internal DNS at all? even though isa is set up to forward requests to server.mydomain.local
as always i have missed out something. on ISA i still had it forwarding the requests to port 80 instead of port 443
I managed to find out that the name of the certificate was incorrect and exchange was refusing it.
so i created a new certificate with the same internal name as the exchange server.
however now when i open owa from external get a certificate error saying "the security certificate presented by this website was issued for a different websites address" is there any way i can get rid of this message?
Ok i have tried creating a certificate here is what ive done
my external address is mail.mydomain.com/exchange
my internal address is servername.mydomain.local/
i have a certficate that has servername.mydomain.local and this now works fine on SSL
if i change the certificate to mail.mydomain.com and go in to the host file on the isa server and create an entry that looks like this "exchangeipaddress (tab) mail.mydomain.com"
however i cannot get on to webmail and i get an error 500 about the certificate being incorrect.
am i doing something wrong?
http://technet.microsoft.c
Have a read of this as well!
Business Accounts
Answer for Membership
by: keith_alabasterPosted on 2009-10-26 at 03:57:19ID: 25661021
Have you exported the new cert from the exchange server - including the private key and then imported it to ISA into the computer account - personal store?