Solved

After moving the OWA to a different DMZ it does not work.

Posted on 2009-05-14
3
467 Views
Last Modified: 2012-05-07
Hello,

We have two OWA servers runing Exchange 2003 SP2 under W2K3 SP2. As part of the move, we moved one OWA server to a different DMZ. After taht we can access the web interface for logon credential but cannot access the mailbox. After giving the credentials it says "Page cannot be displayed". Turned off user friendly error, it shows "Unspecified error".

The firewall group claims that everything is open between the OWA server DMZ and the Mailbox server subnet. I compared all other configurations with the working one. They are same.

Important: But I tried to see the list of domain controllers under 'Directory Access' tab of the OWA server properties, it shows empty.
Any help is greatly appreciated.

Thanks,
0
Comment
Question by:rafiq01
  • 2
3 Comments
 
LVL 24

Expert Comment

by:Rajith Enchiparambil
ID: 24389861
All you need is a front end server with your firewall forwarding 443 traffic to it. Why do you have the server in DMZ?
0
 

Author Comment

by:rafiq01
ID: 24391368
That is from outside to the OWA server what about OWA server to mailbox server?

There might have reasons to the engineers who originally put it in the DMZ but not to me and I cannot change the decision now. So, just left it there.
0
 

Accepted Solution

by:
rafiq01 earned 0 total points
ID: 24503808
Two issues found and resolved.
1. Firewall did not have appropiet posts opened from OWA to AD and Exchange.
For Exchange Communication:
Port 80 for HTTP
Port 691 for Link State Algorithm routing protocol

For Active Directory communication:
Port 389 for LDAP (TCP and UDP)
Port 3268 for Global Catalog Server LDAP (TCP)
Port 88 for Kerberos Authentication (TCP and UDP)
Port 53 for DNS (TCP and UDP)
Port 135  RPC endpoint mapper (TCP)
Ports 1024 and higher for RPC services

2. Needed to add the subnet of OWA under AD Sites and Services.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

MS Outlook is a world-class email client application that is mainly used for e-communication globally.  In this article, we will discuss the basic idea about MS Outlook, its advanced features, and types of MS Outlook File formats.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question