Solved

ISA 2004 Stopping Blackberry OWA access with default last rule

Posted on 2010-09-09
4
532 Views
Last Modified: 2013-11-16
I have recently changed the A record for the public facing OWA address. Since then the ISA server is denying any further blackberry connection attempts. All was fine before the A record was changed. I can see the default last rule denying the HTTPS requests in the logging. Not sure why though.

ISA 2004 SP3
Exchange 2003

Thanks
0
Comment
Question by:joncrt
  • 3
4 Comments
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 33640559
Are you surprised?

Define what you mean by changed the A record - the IP address of the record or the FQDN?
If it is the name, have you got new certificates? Are these imported into ISA and associated with the web publishing rule listener?
Has the updated certificates been pushed to the respective Blackberry hand-helds?
Have you re-run the publishing wizard to rebuild the rule?
0
 

Author Comment

by:joncrt
ID: 33644372

I have changed the IP address of the record, not the host name. I have not re-run the publishing rule. I'm using the same certificate as before. Do I need to re-run the web publishing rule?
0
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 500 total points
ID: 33648695
Should be OK - unless you had more than one ip address on the external interface.

For example, I have 5 external IP addresses on my external FTMG server (FTMG being the latest version of ISA). When I publish my internal services to the outside you need to create a listener. By default, ISA/FTMG will use ALL the external ip addresses OR you can select the ip address to use from that list. Not sure if this applies to you or not but if it does - and you have changed the IP address that is associated with the service then the service listener will require amending.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 33663548
Thank you :)
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Fortinet FWs backdoor vulnerability 3 87
Sonic Firewall re-routing 443 wrong server IP 10 94
palo alto VM series in AWS 3 89
centos7 firewalld udp ports 33 64
To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
Concerto provides fully managed cloud services and the expertise to provide an easy and reliable route to the cloud. Our best-in-class solutions help you address the toughest IT challenges, find new efficiencies and deliver the best application expe…
A company’s greatest vulnerability is their email. CEO fraud, ransomware and spear phishing attacks are the no1 threat to a company’s security. Cybercrime is responsible for the largest loss of money to companies today with losses projected to r…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now