IMAP Configuration In Exchange Server 2016 for External Client

Hi friends I need to configure IMAP in Exchange server 2016.Already OWA/Autodiscover/ECP are working.But some of external users we need to configure IMAP.Below steps already done,
->Service started of IMAP4 and IMAP4BE
->Configuration for the External client done through Set Imap setting command
->Cerficate Assigned to IMAP services through ECP->Servers->Certificate option
->IMAP over SSL:993 and IMAP over TLS:143 configured

But when i try to configure outlook through IMAP for external client getting error a secure connection cannot be established
amitpatelenggSystem AdminAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

viktor grantExchange ServersCommented:
Hi,

Have you checked that the port 143 and 993 are open in your firewall?

Can you establish communication with this port externally?

Try to telnet and to check.

Cheers
Viktor
1
timgreen7077Exchange EngineerCommented:
Also the firewall needs to forward those ports to the proper exchange servers.
0
amitpatelenggSystem AdminAuthor Commented:
Yes I have checked both port 993 and 443 open from firewall and telnet is also tested ok.
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

timgreen7077Exchange EngineerCommented:
have you confirmed the ports are forwarded to the exchange servers on your firewall for inbound IMAP traffic. internal test is fine but what about external.
0
viktor grantExchange ServersCommented:
HI,

Yes eaxctly you need to be sure from external.

Internally it is working?

Cheers
Viktor
0
amitpatelenggSystem AdminAuthor Commented:
From External i am able to telnet on both port 143 and 993.Also check the Rules in Firewall for inbound traffic is ok.For IMAP external config which certificate needs to apply SAN or Wildcard.I have two Exchange servers in DAG.
0
timgreen7077Exchange EngineerCommented:
I have always used SAN for all things exchange. the name space that you are attempting to connect to also needs to be on the cert. so if you are connecting to imap.domain.com that name needs to be on the cert. name space can be whatever you chose.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
amitpatelenggSystem AdminAuthor Commented:
Thanks for the Reply. I have also assigned SAN for the IMAP services for External client.But in our environment Citrix Load balancer configured with Exchange server 2016.Is there any role of Citrix load balancer for IMAP connectivity from external?
0
timgreen7077Exchange EngineerCommented:
I don't know much about load balancers but the load balancers will need to know where to send the IMAP traffic if the load balancers manage your inboud exchange traffic weather it's smtp, pop, OWA, or IMAPA.
0
timgreen7077Exchange EngineerCommented:
its also possible you wull have to add the cert to the load balancers for SSL. Not 100% sure though.
0
viktor grantExchange ServersCommented:
No more replies from the author...it seems timgreen7077 resolved the issue
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.