Solved

Can't connect to exchange 2007 across IPSec

Posted on 2007-12-05
4
495 Views
Last Modified: 2008-02-01
I have several sites on different IP ranges connected via IPCOP's VPN (IPSEC) connections.

I recently upgraded from exchange 2003 to 2007 since the upgrade my users on the remote networks can't connect to exchange unless they PPTP the main network.

I can ping across the vpn networks, and users authenticate back to the AD Box it is just exchange that won't connect.

Any suggestions
0
Comment
Question by:itigroup
  • 3
4 Comments
 
LVL 22

Accepted Solution

by:
ATIG earned 500 total points
ID: 20410642
how are the clients configured mapi?
Are the clients in the same AD site or diferent?
Is all the mail central in one location?

have you check for latency between sites.......

can the user get to the server via OWA?
0
 

Author Comment

by:itigroup
ID: 20416374
Hey,

Clients are normal Exchange 2007 (SMTP)
Clients are in same AD
Mail is Central
Latency not a problem it worked before Exchange 2007 upgrade
OWA works fine.

B
0
 

Author Comment

by:itigroup
ID: 20416381
Seem that Exchange 2007 client and Exchange 2007 Server don't want to communicate over IPSEC.
0
 

Author Comment

by:itigroup
ID: 20433639
Could someone else give me some advice here.

To explain, I have multi office hooked up via ipsec.

Users with Outlook 2003 can connect to exchange server, but users with Outlook 2007 can't over our office to office IPSec link.

If the 2007 users connect via pptp it works.

Weird.

Any ideas?
0

Featured Post

Now Available: Firebox Cloud for AWS and FireboxV

Firebox Cloud brings the protection of WatchGuard’s leading Firebox UTM appliances to public cloud environments. It enables organizations to extend their security perimeter to protect business-critical assets in Amazon Web Services (AWS).

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question