Cisco IronPort Blocks Exchange ActiveSync and OWA

We're adding a Cisco IronPort C170 to our network for spam prevention and email encryption.  We currently have one Exchange 2010 server handling email for our company.  We went through the system setup on the C170, giving it a default gateway, IP address, FQ Hostname, and set it up to accept incoming, and relay outgoing mail to/from our Exchange server.

We then setup an Exchange send connector to route mail to this smart host, disabled the old send connector, setup the DNS MX records, and changed the NAT on our ASA to point our external public mail IP to the C170 instead of the Exchange server.

Incoming and outgoing email were working fine.  However, trying to browse to our OWA failed and was instead being sent to the C170, and trying to setup an ActiveSync partnership fails from mobile devices.  Mobile devices that already had an ActiveSync partnership can still send/receive emails, but do not sync anything else, such as new/updated calendar events.

Is there something we're missing that allows that traffic to be forwarded to the Exchange server?