<div>
Thanks! That did the trick. Always something simple...
</div>


Thanks! That did the trick. Always something simple...

<div>
<div class="content wysiwyg-content">
We're adding a Cisco IronPort C170 to our network for spam prevention and email encryption. &nbsp;We currently have one Exchange 2010 server handling email for our company. &nbsp;We went through the system setup on the C170, giving it a default gateway, IP address, FQ Hostname, and set it up to accept incoming, and relay outgoing mail to/from our Exchange server.<br />
<br />
We then setup an Exchange send connector to route mail to this smart host, disabled the old send connector, setup the DNS MX records, and changed the NAT on our ASA to point our external public mail IP to the C170 instead of the Exchange server.<br />
<br />
Incoming and outgoing email were working fine. &nbsp;However, trying to browse to our OWA failed and was instead being sent to the C170, and trying to setup an ActiveSync partnership fails from mobile devices. &nbsp;Mobile devices that already had an ActiveSync partnership can still send/receive emails, but do not sync anything else, such as new/updated calendar events.<br />
<br />
Is there something we're missing that allows that traffic to be forwarded to the Exchange server?
</div>
</div>


We're adding a Cisco IronPort C170 to our network for spam prevention and email encryption.  We currently have one Exchange 2010 server handling email for our company.  We went through the system setup on the C170, giving it a default gateway, IP address, FQ Hostname, and set it up to accept incoming, and relay outgoing mail to/from our Exchange server.

We then setup an Exchange send connector to route mail to this smart host, disabled the old send connector, setup the DNS MX records, and changed the NAT on our ASA to point our external public mail IP to the C170 instead of the Exchange server.

Incoming and outgoing email were working fine.  However, trying to browse to our OWA failed and was instead being sent to the C170, and trying to setup an ActiveSync partnership fails from mobile devices.  Mobile devices that already had an ActiveSync partnership can still send/receive emails, but do not sync anything else, such as new/updated calendar events.

Is there something we're missing that allows that traffic to be forwarded to the Exchange server?

Cisco IronPort Blocks Exchange ActiveSync and OWA

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Interactions between email servers and clients are governed by email protocols. The three most common email protocols are POP, IMAP and MAPI. Most email software operates under one of these (and many products support more than one).  The correct protocol must be selected, and correctly configured, if you want your email account to work.

Email Protocols

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).