I have the front-end server published via ISA successfully with SSL on the ISA. Only two things dont work:

1. if I click log-off, I get prompted for my credentials again and then I get an "access denied" error and
2. if I click on a web link in an email the same as #1 happens


Any ideas on this?

Thanks!

Chris

Evan Mann wrote:

I have the same thing, I did it w/o SSL and with SSL.  I assume you are
server publishing the front end server only through ISA?

The most secure way to to do this with ISA is SSL Bridging, where the
SSL ceritifcate is placed on one of the ISA servers interfaces.  The SSL
certificate is also placed on the front-end server because you have to
install an SSL certificate to be able to export it, which is necessary
to then install it into the Personal store on the ISA server.

So in summary, install SSL cert on front-end, export it using
Certificates MMC, then import it on ISA using Certificates MMC, setup
SSL Bridging.

The back end servers never need an SSL cert.

And no ISAPI filter is needed for any of this.  It's not even needed If
you do SSL tunneling.


-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris H Sent: Friday, February 25, 2005 3:03 PM To: Exchange Discussions Subject: Front-End\Back-End OWA

I have front-end \ back-end OWA through an ISA server working without
SSL.
For those with any experience, am I better served to put the SSL on each
Exchange server or just add it once at the ISA server and let it
re-direct everything as SSL? Any traps?

oh, if it matters, exchange 2003 sp1 and ISA server 2000 SP1

_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016

Please include the email address which you have been contacted with.


_________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016

Please include the email address which you have been contacted with.





_________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016

Please include the email address which you have been contacted with.



Reply via email to