Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

ISA Server 2004 blocking Outlook

Posted on 2009-07-07
9
Medium Priority
?
786 Views
Last Modified: 2013-11-16
Hi,
We have SBS2003 running Exchange2003 and ISA 2004. Yesterday I was playing with ISA (which I don't yet understand - but I never let ignorance stand in my way) trying to open addtional SSL ports using a free tool called ISA Server Tunnel Port Editor in order to allow Autodesk licensing software to function (on port 145) This was successful but once I'd finished I thought I'd better remove this port. Today no one can access Exchange and ISA appears to be blocking with the message Unidentified IP traffice (TCP:2700) Any ideas please?
0
Comment
Question by:RogerNZ
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
9 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 24798557
Interesting stance - one view might be to never let ignorance stand in the way. An alternative view might be not to screw around with systems you haven't a clue about.

The tool is actually called tunnel port range extender (tpre).

So what SSl ports does tpre believe are still in place?
What results do you get from the BPA?

0
 

Author Comment

by:RogerNZ
ID: 24798670
Hi Keith
You're right of course...

tpre lists SSL port 443. All other services appear to be functional.

Downloading Best Practices Analyzer now. I'll let you know the results.
0
 
LVL 29

Expert Comment

by:pwindell
ID: 24798725
Rodger,
Why would that tool even have anything to do with Autrodesk licensing?
Anyway,...Outlook.  ISA does not block Outlook,...it ignores Outlook,..not quite the same thing.   In the Firewall Client Configuration in the ISA MMC you have to enable Outlook to be used by the Firewall Client Software.  Change the setting from "1" to "0" so that it reads  "outlook    disable=0"
After you get the SSL Port Config back the way it belongs (which I don't think is related to all your problems),...to fix ISA in general re-run the Internet Connection Wizard thing over again.  You have to use the Wizards for just about everything with SBS,...manually configuring individual things yourself usually makes a big mess.
0
Are You Ready for GDPR?

With the GDPR deadline set for May 25, 2018, many organizations are ill-prepared due to uncertainty about the criteria for compliance. According to a recent WatchGuard survey, a staggering 37% of respondents don't even know if their organization needs to comply with GDPR. Do you?

 
LVL 29

Expert Comment

by:pwindell
ID: 24798739
Extra..
Outlook.  Outlook works fine if you use anonymous Access to outbound POP3/SMTP and the Client machine is working as a SecureNAT Client.
But if you want authentication you have to use the Firewall Client which requires the steps I described.
0
 

Author Comment

by:RogerNZ
ID: 24798761
BPA says I have a problem "The secure channel to the domain controller could not be verified" Is this likely to be it? Also I have some certificate errors but I suspect they've been there a while. Our Blackberry users are still receiving mail.
0
 

Author Comment

by:RogerNZ
ID: 24798784
Autodesk licensing is now a web based activity. To transfer a license from one workstation to another the license gets returned to Autodesk - then downloaded to the target workstation. No more license file transfers.
0
 
LVL 29

Expert Comment

by:pwindell
ID: 24798798
Use the SBS Installation Program.
Remove ISA
Do not use Add/Remove Programs to do it.
Run the Internet Conenction Wizard contraption (sorry I don't rember the exact name/acronym for the thing).
Use the SBS Installtion Program again
Install ISA,...again.
The Internet Connection Wizard should automatically run itself at the end of that,...if it doesn't then do it yourself.
 
 
0
 

Author Comment

by:RogerNZ
ID: 24799024
I tried changing outlook to disable:0 and it didn't work.

I'm not that keen to run the ISA wizard since changine ISA without understanding it is what got me into trouble in the first place. I'm a Mechanical Design Engineer who doubles as IT for around 40 users. Mostly this works well but sometimes I get out of my depth by doing things I shouldn't have...

I have included more information from the ISA monitoring:
Denied connection
Log Type: Firewall Service
Status: A non-SYN packet was dropped because it was sent by a source that does not have an established connection with the ISA server computer.
Rule:
Source: Internal (192.168.1.99:54191)
Destination: Local Host (192.168.1.250:2700)
Protocol: Unidentified IP Traffic (TCP:2700)
0
 

Accepted Solution

by:
RogerNZ earned 0 total points
ID: 24799645
Managed to get webmail working and noticed Remote access service is stopped message. Restarted now all is fine. Thanks for the help.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Suggested Courses

704 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question