Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

SBS 2003 RWW/OMA - firewall port forwarding and security advice

Posted on 2009-05-17
5
Medium Priority
?
1,723 Views
Last Modified: 2013-12-02
I would be grateful for some clarification and advice - I am in the process of planning to use Outlook Mobile Access and then Remote Web Workplace on my SBS 2003 server (1 NIC), which has 5 client computers.

My setup is a Netgear DG834G modem/router > Netgear FVS318 hardware firewall (my ISP doesn't use PPOE) > server/client computers on the 192.168.x.x LAN.

I would like to try to use OMA using my Blackberry and in the near future when I get an offsite machine, use RWW. Before I do this I would appreciate some advice: -

1. To forward the necessary ports to the server, will I have to forward the ports on both the router and hardware firewall to the server, or just the router?
2. Although I understand that SSL can be used, is it just the strength of the passwords that will protect the server from unauthorised access from the internet?

Thanks for your help.
0
Comment
Question by:CSHTech
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 8

Expert Comment

by:Perry_IDITC
ID: 24406513
Hi,

When you foward the ports you need to configure it in such a way that communication is possible from the internet to the sever on the required ports. So if you have 2 firewalls in the way like a hardware one and the windows firewall, you will need to foward the port on the hardware firewall then open the port on the windows firewall.

Using SSL is a really good ideal. It encrypts communication between your mobile device and the server, so passwords and such are not as open to man in the middle attacks. you can either buy a SSL from godaddy or somewhere for your sever or create your own. Its is a better idea to buy a SSL because it will automatically be trusted and less configuration is required. Also you might want to consider using the Blackberry Profissional Software (10 blackberrys max) or Enterprise Software (unlimited blackberrys) so the calander and contacts will sync in addition to the e-mails.

Cheers,
Perry
0
 

Author Comment

by:CSHTech
ID: 24407025
Thanks for your reply.

I've added the forwarding rules to the router and hardware firewall. I've also run the CEICW again and ticked OWA, OMA etc (although got the popup that the firewall could not be configured - possibly because I only have 1NIC?) but cannot reach OWA, OMA, or Exchange via //:servername/owa in the IE address bar. I keep getting "Internet Explorer cannot display the webpage".

Any thoughts?
0
 
LVL 8

Accepted Solution

by:
Perry_IDITC earned 1200 total points
ID: 24407087
Things you need to check:

DNS: both internal and external (if you are going to use it remotely) Make sure your server is setup as a dns server and is configured properly.
Firewalls: make sure ports 80, 443, 25 and 4125 are open or are on the allowed list
Make sure IIS is started
Exchange is configured right?
Are you able to view the oma page by http://192.168.x.x/OMA or http://servername/OMA not OWA?
0
 

Author Comment

by:CSHTech
ID: 24407372
Everything checks on your list. When I log in either on the LAN using http://servername/oma or using my mobile with http://dnsname.oma, I get the error message:-

"Your account is not configured for wireless access"  

...which on checking Google has something to do with Exchange, but I'm a bit lost at this point.....any help much appreciated.
0
 

Author Closing Comment

by:CSHTech
ID: 31582335
Perry, thanks for your help. The latest issue should be the subject of another question, so I've awarded the points now.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
This program is used to assist in finding and resolving common problems with wireless connections.
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question