Avatar of leegclystvale
leegclystvale
Flag for United Kingdom of Great Britain and Northern Ireland asked on

Wildcard cert with Exchange 2007

I have just had a new firewall installed and the config is using port forwarding and reverse proxy as i don't have many public IP addresses.

I have purchased a godaddy wildcard for HTTPS inbound requests and it works fine.

The issue i have is that connecting to exchange now uses the wildcard cert and not the exchange's UCC cert.  The installers said 'just install the wildcard on the Exchange server and that's it'.

Having looked at various posts, most state don't use wildcards on Exchange.(Outlook anywhere, autodiscover and activesync issues)  

Some others suggest it can be easily remedied by running "Set-OutlookProvider -Identity EXPR -CertPrincipalName msstd:*.domain.com

Should i tell them to sort out another method of forwarding requests and keep my UCC cert on Exchange?  Or just access Exchange using HTTP internally?

I'm not fully sure of my options, which i why i paid them to configure their firewall!

Any help appreciated
Email ServersExchangeSSL / HTTPS

Avatar of undefined
Last Comment
leegclystvale

8/22/2022 - Mon
arnold

Terminate the secure connection on the reverse proxy with the reverse proxy backend going unsecure to exchange.

Or use internally issued certificate between reverse proxy and exchange.
leegclystvale

ASKER
cheers Arnold,

so you're saying a wildcard cert will be fine?   and be ok on all the incoming exchange services, IIS OWA IMAP Autodiscovery outlookanywhere etc?
ASKER CERTIFIED SOLUTION
arnold

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
jmcg

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
leegclystvale

ASKER
I've opted for the wildcard cert on exchange. Having issues there so will post another question. Thanks for your help
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy