Cisco IronPort Blocks Exchange ActiveSync and OWA

We're adding a Cisco IronPort C170 to our network for spam prevention and email encryption.  We currently have one Exchange 2010 server handling email for our company.  We went through the system setup on the C170, giving it a default gateway, IP address, FQ Hostname, and set it up to accept incoming, and relay outgoing mail to/from our Exchange server.

We then setup an Exchange send connector to route mail to this smart host, disabled the old send connector, setup the DNS MX records, and changed the NAT on our ASA to point our external public mail IP to the C170 instead of the Exchange server.

Incoming and outgoing email were working fine.  However, trying to browse to our OWA failed and was instead being sent to the C170, and trying to setup an ActiveSync partnership fails from mobile devices.  Mobile devices that already had an ActiveSync partnership can still send/receive emails, but do not sync anything else, such as new/updated calendar events.

Is there something we're missing that allows that traffic to be forwarded to the Exchange server?
FSYRDirector of ITAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Well that's what I would expect. If you only have one external IP address you need to NAT on ports . Send port 25 to the Cisco. Port 443 (and possibly 80) needs to still go to the exchange server.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
FSYRDirector of ITAuthor Commented:
Thanks! That did the trick. Always something simple...
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.