You have a bunch of iPhone users that all successfully synchronise with your exchange server from outside of your network using the mobile telephone network. However, when you try to do the same using your internal wireless network synchronisation fails.
The reason for this is because your iPhones are configured to use the externally published exchange servers, for example owa.domainname.com which in turn is configured to use the external IP address of your router/firewall.
Most, if not all business class firewalls/routers are designed to block this type of looping from internal devices.
The way to resolve this is to configure your internal network to allow access to owa.domainname.com using an internal IP address.
The easiest way to do this is using your internal DNS servers by creating a forward lookup zone called owa.domainname.com and then creating a blank A record that is configured to use your Exchange servers internal IP address.
Using the DNS Console (Start> Administrative Tools> DNS) navigate to the Forward Lookup Zones, right click and select New Zone. You will then be presented with the New Zone wizard.
Using the wizard select the following options:
Store the zone in Active Directory
To all DNS Servers in the domain
Zone Name: owa.domainname.com
Allow only secure dynamic updates
Once the new zone has been created right click the zone and select New Host (A or AAAA). In the dialogue box leave the name blank and in the IP Address section enter the internal IP address of the Exchange server.
If you are using multiple Exchange Servers then this IP address must be the Front End Server (if using Exchange 2003) or the Client Access Server (if using Exchange 2007 or 2010)
We can easily save the inclusive minutes of our data plans and save money by using our internal wireless networks to allow mobile devices to use our internal exchange servers (or any other service) without the need to reconfigure the mobile device.
This guide provides a simple solution to what can be an annoyance for your end users.
Written by Glen Knight (demazter) as part of a series of how-to articles.