RE: [Exchange] Outlook certificate error?

2016-10-17 Thread Damien Solodow
That's what I was thinking (the network change) as Outlook/Exchange has *never* liked that. I'll check the firewall, but I'm thinking it's not there as it happens inside our network. Do you know if there is a way to suppress that message or is the solution just tell people "close Outlook before

RE: [Exchange] Outlook certificate error?

2016-10-17 Thread Michael B. Smith
Is your DNS truly split? Or does your routing environment do "router on a stick"? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Damien Solodow Sent: Monday, October 17, 2016 1:34 PM To: exchange@lists.myitforum.com Subject: RE: [Exchange] Outlook

RE: [Exchange] Outlook certificate error?

2016-10-17 Thread Damien Solodow
Already did that. :) Although since I'm doing SSL offload, the IIS certs shouldn't matter. DAMIEN SOLODOW Senior Systems Engineer 317.447.6033 (office) HARRISON COLLEGE From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Debora Gilbert Sent: Saturday,

RE: [Exchange] Outlook certificate error?

2016-10-17 Thread Michael B. Smith
This typically happens when a network changes beneath Outlook and the new network requires a re-auth (think of going from a docked/wired configuration to wireless when you undock). This means that Outlook's TCP ports get closed unexpectedly. However, whenever I see SSL offload mentioned - I

RE: [Exchange] Outlook certificate error?

2016-10-17 Thread Damien Solodow
Should be truly split; internal and external return different IPs for the FQDN, and you can't reach internal from external and vice-versa. DAMIEN SOLODOW Senior Systems Engineer 317.447.6033 (office) HARRISON COLLEGE From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com]

RE: [Exchange] Outlook certificate error?

2016-10-17 Thread Michael B. Smith
So you don't have SSL offload internally? From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Damien Solodow Sent: Monday, October 17, 2016 3:26 PM To: exchange@lists.myitforum.com Subject: RE: [Exchange] Outlook certificate error? Should be truly split;

RE: [Exchange] Outlook certificate error?

2016-10-17 Thread Damien Solodow
We have SSL offload internal; it's handled by an Exchange virtual server on an F5 LTM. Internal DNS resolves to the IP of that virtual server, External DNS resolves to a public NAT for that virtual server. I should have been clearer on *what* happens inside our network. :) We've had the issue