Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Cisco ASA 5505 and MS Exchange Server

Posted on 2013-01-03
4
Medium Priority
?
1,208 Views
Last Modified: 2013-01-04
Since we lost the password for our WAN Checkpoint FW, I am replacing it with an ASA5505. To start with, I keeping it wide open “permit ip any any” as it is a secured private MPLS between our sits only. Everything is working fine, can ping systems between sites and RDP computers etc… except that our MS Exchange Server not working or communicating with the primary exchange server in other site to send or receive any emails… But I can ping and RDP both servers from both end.

Since it is wide open “permit ip any any”; anything else I need to permit/configure in ASA 5505 for the MS Exchange traffic to pass through?
0
Comment
Question by:Mike
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 12

Accepted Solution

by:
Gary Dewrell earned 1200 total points
ID: 38741859
Could be the fixup protocal for smtp.
Take a look at this.

http://support.microsoft.com/kb/320027
0
 

Author Comment

by:Mike
ID: 38742024
Since ASA using "inspect" I tried the following, still not working..

conf t
policy-map global_policy
class inspection_default
no inspect esmtp

-----------------------------------



access-list FromOutside extended permit ip any any

access-list FromOutside extended permit esp any any

access-list FromOutside extended permit udp any eq isakmp any

access-list FromOutside extended permit udp any eq 4500 any

access-list FromInside extended permit ip any any


************************

global (outside) 1 interface

nat (inside) 0 access-list nonat_acl

access-group FromInside in interface inside

access-group FromOutside in interface outside

***************************

class-map inspection_default

 match default-inspection-traffic

!

!

policy-map type inspect dns preset_dns_map

 parameters

  message-length maximum 512

policy-map global_policy

 class inspection_default

  inspect dns preset_dns_map

  inspect ftp

  inspect h323 h225

  inspect h323 ras

  inspect netbios

  inspect rsh

  inspect rtsp
             
  inspect skinny

  inspect sqlnet

  inspect sunrpc

  inspect tftp

  inspect sip

  inspect xdmcp

!

service-policy global_policy global
0
 

Author Comment

by:Mike
ID: 38742055
Thanks gdewrell

Acutally it has to do with fixup/inspect. I just need to power off and power on after the changes.  It is working now.
0
 

Author Closing Comment

by:Mike
ID: 38742058
conf t
policy-map global_policy
class inspection_default
no inspect esmtp
wr

power off and on worked.  Thanks gdewrell.

http://support.microsoft.com/kb/161931
http://support.microsoft.com/kb/176466
0

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will help to fix the below error for MS Exchange server 2010 I. Out Of office not working II. Certificate error "name on the security certificate is invalid or does not match the name of the site" III. Make Internal URLs and External…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
how to add IIS SMTP to handle application/Scanner relays into office 365.
Suggested Courses

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question