?
Solved

Exchange 2010 and accessing w/o https

Posted on 2011-02-21
8
Medium Priority
?
997 Views
Last Modified: 2012-08-14
Hello,
Is it possible to access OWA on Exchange 2010 without using "https"?
I only want to use "http"

If it is possible, please explain how to do this.

Thanks,
0
Comment
Question by:cliffordgormley
  • 4
  • 4
8 Comments
 
LVL 1

Expert Comment

by:jrojas1213
ID: 34946005
yes but not really a best practice because i believe user names and passwords are exposed under HTTP and is really why it is best to have OWA under HTTPS.  May I ask why you would like to do that ?
0
 

Author Comment

by:cliffordgormley
ID: 34946245
because I need to terminate an SSL VPN Client connection to an ASA firweall, and right now all https/443 is being forwarded to the internal mail server, which I cannot do.
0
 
LVL 1

Accepted Solution

by:
jrojas1213 earned 2000 total points
ID: 34946273
ahhh I thought that maybe why .  I had the same exact issue when I recently purchased my ssl vpn.  I suggest that you keep it the way it is because its there for security reasons.  I'm assuming that you only have one static IP my solution was to get a block of static IPs that way you can have one static IP for exchange using port 443 and another IP for the ssl vpn uding port 443.  its easier that way and you dont have to mess with exchange.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 

Author Comment

by:cliffordgormley
ID: 34946849
yep, that is exaclty where I am stuck right now.
I am hoping that I can specify a URL that the Cisco ASA will recognize, and then wont forward it to the internal server.
I wish I has another static/public ip that I could use.
0
 
LVL 1

Expert Comment

by:jrojas1213
ID: 34946871
I ran into that issue back in November when I bought my barracuda ssl vpn and I bought a block if IPS from my ISP and it was only 20 bucks.  call your ISP and get additional IP's.  you will get a new set of IP's they wont add to what you have unfortunately but it took 2 mins in the wizard to reconfigure the outside IP and extra couple of mins to create/modify an ACL's and NAT.  Much quicker and easier then dealing with exchange.
0
 

Author Comment

by:cliffordgormley
ID: 34946885
Welcome to the age where it is commonplace to have 64-bit computers and laptops...

Can't you just disable the requirement for https on Exchange 2010 for OWA?
0
 
LVL 1

Expert Comment

by:jrojas1213
ID: 34946925
why would you want to, thats to protect from all the packet sniffers out there peaking at your data as it crosses the information super highway. as far as im aware of 64 bit does not provide any protection in that avenue it just a bigger bus for data to travel on.  you could go through that process of disabling it but with the volume of data that in/out of the exchange server I wouldnt  want to have my systems compromised because a user names password is "password" and some hacker sniffed it out.
0
 

Author Comment

by:cliffordgormley
ID: 34947356
I fixed it by settign ssl vpn client to listen on a differnt port.
0

Featured Post

 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Steps to fix “Unable to mount database. (hr=0x80004005, ec=1108)”.
Stellar Exchange Toolkit: this 5 in 1 toolkit comes loaded with mega-software tool. Here’s an introduction to tools’ usage and advantages:
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question