?
Solved

Redirect OWA to HTTPS

Posted on 2009-05-11
9
Medium Priority
?
728 Views
Last Modified: 2012-05-06
To Experts,

When users type http://mail.contoso.com, I would like the traffic to go to this website address https://mail.contoso.com/owa. How to configure the IIS? I'm runningWindows Server 2003 with Exchange 2007.

Thanks!
0
Comment
Question by:reysrivera
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
  • 2
  • +2
9 Comments
 
LVL 10

Assisted Solution

by:bob_the_builder
bob_the_builder earned 400 total points
ID: 24359771
0
 

Author Comment

by:reysrivera
ID: 24360022
I real don't know must about IIS 6 so is there step-by-step instruction on how to do this?
0
 
LVL 13

Expert Comment

by:FearNoMore
ID: 24360737
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 4

Expert Comment

by:aletjolly
ID: 24363245
As you said that you are having Windows 2003. Kindly have a look on below link:
http://exchange.mvps.org/owaredirect_frames.htm

Note: In the above link replace /exchange with /owa
0
 
LVL 4

Expert Comment

by:aletjolly
ID: 24363262
Sorry mistyped instead of "/exchange" please type in "https://mail.contoso.com/owa"
0
 
LVL 1

Assisted Solution

by:davegooch
davegooch earned 400 total points
ID: 24363959
When I setup Outlook Web Access at my company, I also wanted to redirect HTTP to HTTPS. However, a Microsoft consultant told me not to do it. Apparently it is not a "best practice" to allow unencrypted HTTP into an Exchange front-end server, however briefly. It seems that Microsoft is afraid that it could be used to compromise the server. It seems silly, but that's what Microsoft told me, so our OWA server requires users to connect with HTTPS and does not redirect.
0
 

Author Comment

by:reysrivera
ID: 24365723
davegooch:

Do you have the article from Microsoft about there claim? I myself not comfortable about the redirection and I'm trying to get article from Microsoft its not good practice.
0
 
LVL 13

Accepted Solution

by:
FearNoMore earned 1200 total points
ID: 24366951
If Microsoft did not consider it best practice then they would not have published an article explaining how to do it

http://technet.microsoft.com/en-us/library/aa998359.aspx
 
0
 
LVL 1

Expert Comment

by:davegooch
ID: 24373981
Reysrivera, I was given this warning verbally and have so far not been able to find the same warning in writing. I can however give you the email address of the Microsoft consultant who told me this, if you would like to ask her yourself.

In a quick Google search this morning, I found one blog post that starts this way:

It is best practice to require users to use a secure connection for OWA, but it is impractical to train them to type a specific URL such as https://owa.myorg.com/exchange.

That blog post continues to describe a different approach than the Technet article in the previous post. Perhaps this is more secure - http://blog.pennic.com/?p=5
0

Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question