Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


SBS 2008 unable to access Company Website or OWA from behind a TZ105W

Posted on 2013-11-18
Medium Priority
Last Modified: 2013-11-20
The server is a SBS 2008, with an external website with exchange 2007.  The issue came about due to the customer wanting a faster VPN connection.  The previous setup was just a home edition linksys wireless router.  The company website was accessible from external IP addresses, and web-mail.
The sonic-wall was installed, the necessary rules were put in place such as RDP, and SMTP.  Well the users are able to send and receive emails, certain users can access email on their iPhones only, droid based phones unable to connect.  When you go to access the company website:  https://remote.xxxxxxxxxx.com  you receive the sonic-wall's log in information.
Question by:ttorno
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 22

Expert Comment

by:David Atkin
ID: 39656864
You're getting the SonicWall login because you need to redirect HTTP.  You need to forward the following ports on the sonicwall to the SBS:

80 (HTTP)
25 (SMTP)
443 (HTTPS)
987 (Sharepoint)
3389 (RDP - Personally I would not use the default port number though)

Expert Comment

ID: 39657231
Scorpeo is correct.  You need to map your port settings as suggested.

I have seen issues also where external names (e.g. remote.domain.com) where remote.domain.com resolves to the Public IP address of the SonicWall or other router do not route the same behind the firewall as they would coming from the outside.   This can lead to issues with email and other services not working the same in the Office as they do from outside.

I can't tell from your question whether this is an issue or not for certain.
LVL 26

Accepted Solution

Blue Street Tech earned 2000 total points
ID: 39657891
Hi ttorno,

The SonicWALL security appliance can be managed using HTTP (Port 80) or HTTPS (443) and a Web browser. Both HTTP and HTTPS are enabled by default. If you are using the SonicWALL WAN IP address for HTTP or HTTPS port forwarding to a server, then the default Management port must be changed to another unused port number (e.g. 8080, 444, 4443, etc.). You can change this under the System > Administration page.

In order to properly setup access for OWA and SMTP all you need to do is run the Public Server Wizard in the SonicWALL located in the top right corner which will automatically create all the necessary Access Rules, NAT Policies and Address/Service Objects.

I would strongly recommend against opening port 3389 (RDP); it's not a Security Best Practice for many exploitative reasons. The better solution would be to provide VPN access, then internally RDP (which needs no port forwarding on the firewall).

Let me know how it goes!

Author Comment

ID: 39659296
Thank you guys for all your comments, I originally configured the sonic-wall with the rules for email to pass through.  The other aspects were not mentioned to myself, and I was pulled off the protect.  I will pass the information on to my fellow technicians, and write back with the end results.

Author Comment

ID: 39659581
Once the management ports were changed then the OWA and the Share-point site all came up without having to add the port number on the end of the url.  Thank you everyone.

Featured Post

Ask an Anonymous Question!

Don't feel intimidated by what you don't know. Ask your question anonymously. It's easy! Learn more and upgrade.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Know the reasons and solutions to move/import EDB to New Exchange Server. Also, find out how to recover an Exchange .edb file and to restore the file back.
As much as Microsoft wants to kill off PST file support, just as they tried to do with public folders, there are still times when it is useful or downright necessary to export Exchange mailboxes to PST files. Thankfully, it is still possible to e…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question