ok, here's the specific section on port forwarding in official cisco guide (they, for some reason, call it port redirection):)
http://www.cisco.com/en/US
Main Topics
Browse All TopicsWe are trying to set up webmail (Exchange 2000) for our company. The inside IP to our mail server is 10.15.10.15 and the outside address is 64.207.30.34. We have a cisco pix and the static NAT is set up correct (we think). We can access webmail from the inside with the address http://mail.adaes.com/exch
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
ok, here's the specific section on port forwarding in official cisco guide (they, for some reason, call it port redirection):)
http://www.cisco.com/en/US
oh, when you do set up the OWA to use SSL, and correctly configure port redirection on your PIX, you'll have to use the https://mail.server.com from outside instead of just http://
Yuja, what do you mean by there is a difference between fowarding/redirection and static NAT? We looked into the PIX configuration and it does say static (Outside, Inside) 64.207.30.34 10.15.10.15.? Its not a DNS issue b/c we called our ISP and 64.207.30.34 is already recorded. Do we need to do something with the OWA configuration in order for it to work on the outside?? If so, where/how do we change those settings. Thank you much.
Things to check out:
1) Static NAT 64.207.30.34 to 10.15.10.15 and open port 80 on the firewall from WAN to the exchange server.
2)Another check the following link.
http://www.experts-exchang
Just check these two out and tell me
Einsteinjr79, we are able to send and receive mail internally and externally via Outlook 2003. The OWA works internally but when we access the OWA from the outside, it says page can not be display. Our ISP has the A records and MX records for our static IP 64.207.30.34 to \\mail.adaes.com. Our cisco pix has the static NAT set at (outside,inside) 64.207.30.34 10.15.10.15. We are having a difficult time figuring out what is the missing key to get OWA to work from the outside. Is there something in the IIS settings we need to create?correct? Thank you much.
Business Accounts
Answer for Membership
by: yujaPosted on 2005-07-22 at 08:47:03ID: 14503774
nat by itself doesn't help in this case. what you need to do is set up port forwarding. cisco pix by itself doesn't know what to do with an incoming http packet for your webmail server.
com/forum1 05/31.htm
tutorials/ MF004.html
there are several challenges, however. the port forwarding is done based on TCP and UDP port numbers. web sites use a common port 80. So, if you already have a web server on your private network behind your PIX, pix is probably already configured to forward all requests for port 80 to that wweb server. to go around this problem, you can configure webmail (correct name for Exchange server webmail features is Outlook Web Access or OWA, by the way) to use SSL encryption with certificates (actually, this SHOULD be done by anyone security-conscious... since otherwise all your email will be unencrypted and cached in temporary files, and anyone intercepting packets will be able to read your email and logins and passwords you use to access your webmail in plain text). That way, the HTTPS protocol will be used, and it uses a different port number - port 443.
refer to your Cisco manual on how to set up port forwarding... here's a quick howto (for port 80) i found on one of the forums:
http://www.webmasterworld.
to set up your OWA to use SSL certificates, you can use this guide:
http://www.msexchange.org/