Solved

How do I setup Outlook 2007 connectivity using the RPC Filter in ISA 2006?

Posted on 2007-11-26
11
1,757 Views
Last Modified: 2012-06-27
I am trying to publish Exchange 2007 by using the Exchange RPC Filter in ISA 2006, but I'm running across some problems when attempting to connect with Outlook 2007.

When I attempt to connect Outlook will go from connected, to disconnected, to trying to connect over and over again, and will never actually connect to Exchange.  This only occurs with Outlook 2007, if I use Outlook 2003 I can connect without any issues.

On ISA I'm getting "Initiated Connection" and "Closed Connection" back to back to back, with the result codes of "0x80074e24 FWX_E_CONNECTION_KILLED" from the "Closed Connection"s.

I turned logging on with Outlook 2007 and and the following are generated in the event log on the client.

Source: Outlook
Event ID: 19
Rpc call (EcDoDisconnect) on transport (ncacn_ip_tcp) to server (mailbox.domain.com) failed with error code (6) after waiting (109) ms; eeInfo (none).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Source: Outlook
Event ID: 19
Rpc call (Unknown) on transport (ncacn_ip_tcp) to server (mailbox.domain.com) failed with error code (6be) after waiting (0) ms; eeInfo (none).

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

If anyone has Outlook 2007 working through ISA 2006 using the Exchange RPC Filter or knows what the problem could please, please let me know.

Thanks!
0
Comment
Question by:PaulRKrueger
  • 6
  • 4
11 Comments
 
LVL 19

Accepted Solution

by:
SteveH_UK earned 500 total points
ID: 20352614
Is there any reason why you are not using RPC over HTTP(S) (Outlook Anywhere)?  It is generally a better choice than publishing using RPC rules because in that method the clients still need access to Active Directory servers.
0
 
LVL 19

Expert Comment

by:SteveH_UK
ID: 20352618
You can find a range of articles on HTTPS/RPC at http://www.amset.info/exchange/default.asp from EE expert Sembee
0
 
LVL 4

Author Comment

by:PaulRKrueger
ID: 20352937
We were trying to provide a single access method to Exchange via ISA '06, that method being MAPI via RPC filters.  

Also, if publishing RPC requires AD servers for authentication, why is Outlook 2003 working fine? Or are there significant authentication changes between Outlook '03 and '07 that I'm unaware of?

Thanks.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 19

Expert Comment

by:SteveH_UK
ID: 20352992
Do your Outlook clients have access to AD directly?  Outlook 2003 contacts AD directly, and I believe the same is true for 2007.

Nevertheless, if you do want to go down the MAPI route, then I suggest the following:

http://www.isaserver.org/articles/outlookrpcdns.html
0
 
LVL 4

Author Comment

by:PaulRKrueger
ID: 20353999
The clients, in this test environment at least, do not have access to AD Directly.  When I check the connection status on my Outlook 03 client it shows the fqdn of my mailbox server providing both Directory and Mail connections.

I read the article you posted as well, actually thats how I got the Outlook 2003 clients working.

Thanks.
0
 
LVL 19

Expert Comment

by:SteveH_UK
ID: 20354046
It may be that Outlook 2003 is reverting to pre-2003 behaviour, where the Exchange 2003 server does the directory lookups on behalf of the client.  This may also work with the Exchange 2007/Outlook 2003 combination.  It was included in Exchange 2003 to support pre-2003 Outlook clients.

So it may still be the case that this is the issue with the Outlook 2007/Exchange 2007 combination.  Does a 2007 Outlook client give the same connection info?
0
 
LVL 4

Author Comment

by:PaulRKrueger
ID: 20354192
When I check the connection status on the 07 client it shows multiple Directory connections established to one of our global catalog DCs.  As for the Mail connections it shows Connecting/Disconnecting on and off again to the fqdn of the mailbox server.
0
 
LVL 19

Expert Comment

by:SteveH_UK
ID: 20355996
So it sounds like Outlook 2007 needs more access to Exchange than you are providing.  This would make sense as follows:

1. Outlook 2007 attempts to access Exchange and gets enough information using Exchange 2000/3 protocols.
2.  Outlook is informed that this is an Exchange 2007 server
3.  Outlook attepts to use Exchange 2007-specific RPC methods

I've not found anything on the Internet to describe using this method of publishing Exchange 2007.  As far as I can tell, HTTP/RPC is the preferred method.

You may be able to discover additional RPC channels using ISA logging, or there may be an update you can install that already understands Exchange requirements, otherwise you'll need to create or adapt a protocol.
0
 
LVL 4

Author Comment

by:PaulRKrueger
ID: 20507204
Well, we've ended up going back to  RPC over HTTP(S). We got into a conference call with Microsoft's ISA team and Exchange team. Essentially the Exchange team said they didn't support what we were trying to do. That was news to the ISA team who had built the functionality into ISA 2006 to support what we were trying to do. Oh well.
0
 
LVL 19

Expert Comment

by:SteveH_UK
ID: 20508535
Oh well indeed.  Thanks for the points anyway :)
0
 

Expert Comment

by:paulbaldacchino
ID: 20616556
Hiya,

I discovered exactly the same problem.  However, I recently found this link which fixed the problem immediately...

Hope this helps fix your problem too -

http://blogs.technet.com/isablog/archive/2007/12/12/publishing-exchange-2007-may-fail-after-installing-the-update-update-for-publishing-microsoft-exchange-server-2007-for-isa-server-2006.aspx



0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what you should include to make the best professional email signature for your organization.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question