I'll go through them again - last time I looked, as I said, it seemed that the scenarios had ISA directly connected to the internet. I'm going to post this on the ISAServer.org forums, too.
Once I have the additional IP configured on the ISA WAN NIC, I won't be sharing the listener - can't be sharing the listener as the OWA listener will use FBA and the other website can't. Sean Rector, MCSE From: Michael B. Smith [mailto:[email protected]] Sent: Thursday, February 17, 2011 11:31 AM To: MS-Exchange Admin Issues Subject: RE: Getting Exch 2010 visible on the outside Did you look at Tom's configurations for this scenario on isaserver.org? I'm pretty sure he covers this. The only thing I don't like about your configuration is sharing the listener between Exchange and another website. That seems...dangerous. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sean Rector [mailto:[email protected]] Sent: Wednesday, February 16, 2011 11:40 AM To: MS-Exchange Admin Issues Subject: Getting Exch 2010 visible on the outside Hello All, I'll admit it - I'm having trouble fully understanding how to get this set up for outside access - via Autodiscover/VPN/EAS. I mean, I understand what's necessary, just not how to configure all the pieces for our configuration. Current Configuration: WAN connection to Router (single outside IP, but can put multiple on interface) Router to ISA 2006 Server (single inside IP on router (again, can either connect additional inside interface or add a secondary IP to existing inside interface), standard dual-homed configuration on ISA server) ISA server does not use FBA - simple pass-through on HTTPS to Exchange 2003 server where the logon dialog pops up (the old, ugly way of logging on) Inside the firewall, one other website is hosted - on port 80 only, but ISA Server rule for publishing it uses the same listener as Exchange publishing rule. The listener uses a wildcard certificate from Comodo - that is cross-mapped to the SSL cert from our DC on the Exchange server, so it comes up as trusted. Exchange 2003 server does not use FBA (see above). Exchange OWA website requires NTLM authentication, hence the pop-up for credentials. EAS works flawlessly. I know that I need to set up FBA on the 2003 server 1st. When I tried to set it up months ago, I ran into the problem of it breaking EAS. The guides for ISA seem to presume that ISA is directly attached to the internet, without a router between. Of course, any further info you need, I'll send out... Your guidance would be greatly appreciated! Sean Rector, MCSE Information Technology Manager Virginia Opera Association E-Mail: [email protected] <mailto:[email protected]> Phone: (757) 213-4548 (direct line) {+} Subscriptions and tickets are on sale now! The Valkyrie | Madama Butterfly Visit us online at www.VaOpera.org <http://www.vaopera.org/> or call 1-866-OPERA-VA The vision of Virginia Opera is to enrich lives through the powerful integration of music, voice and human drama. ________________________________ This e-mail and any attached files are confidential and intended solely for the intended recipient(s). Unless otherwise specified, persons unnamed as recipients may not read, distribute, copy or alter this e-mail. Any views or opinions expressed in this e-mail belong to the author and may not necessarily represent those of Virginia Opera. Although precautions have been taken to ensure no viruses are present, Virginia Opera cannot accept responsibility for any loss or damage that may arise from the use of this e-mail or attachments. {*} --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe exchangelist
