Solved

Can't connect to exchange 2007 across IPSec

Posted on 2007-12-05
4
490 Views
Last Modified: 2008-02-01
I have several sites on different IP ranges connected via IPCOP's VPN (IPSEC) connections.

I recently upgraded from exchange 2003 to 2007 since the upgrade my users on the remote networks can't connect to exchange unless they PPTP the main network.

I can ping across the vpn networks, and users authenticate back to the AD Box it is just exchange that won't connect.

Any suggestions
0
Comment
Question by:itigroup
  • 3
4 Comments
 
LVL 22

Accepted Solution

by:
ATIG earned 500 total points
ID: 20410642
how are the clients configured mapi?
Are the clients in the same AD site or diferent?
Is all the mail central in one location?

have you check for latency between sites.......

can the user get to the server via OWA?
0
 

Author Comment

by:itigroup
ID: 20416374
Hey,

Clients are normal Exchange 2007 (SMTP)
Clients are in same AD
Mail is Central
Latency not a problem it worked before Exchange 2007 upgrade
OWA works fine.

B
0
 

Author Comment

by:itigroup
ID: 20416381
Seem that Exchange 2007 client and Exchange 2007 Server don't want to communicate over IPSEC.
0
 

Author Comment

by:itigroup
ID: 20433639
Could someone else give me some advice here.

To explain, I have multi office hooked up via ipsec.

Users with Outlook 2003 can connect to exchange server, but users with Outlook 2007 can't over our office to office IPSec link.

If the 2007 users connect via pptp it works.

Weird.

Any ideas?
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now