Re: E2K7, ActiveSync and SSL
- From: "Bharat Suneja [MVP]" <bharat@xxxxxxxxxx>
- Date: Fri, 11 Apr 2008 18:21:19 -0700
Yes - make sure the certificate subject name matches the external fqdn and the devices trust the CA.
--
Bharat Suneja
Microsoft Corporation
----------------------------------
This posting is provided "AS IS" with no warranties, and confers no
rights. Please do not send email directly to this alias. This alias is for
newsgroup purposes only.
"Strunk" <Strunk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:19F5EAD5-AE73-4B34-B14E-522DF5839BD0@xxxxxxxxxxxxxxxx
So you are saying that it is possible to get this setup to work as
long as i get the SSL certifikat right ?.
--
/Strunk
"Bharat Suneja [MSFT]" wrote:
So it's simply passing on inbound HTTPS traffic.
The URL used to access it from outside should be used in the subject name of
the cert.
Generally, if you're using the same web site to access OWA as well - you can
use the same URL (and certificate) to access EAS as well.
--
Bharat Suneja
Microsoft Corporation
------------------------
This posting is provided "AS IS" with no warranties, and confers no
rights. Please do not send email directly to this alias. This alias is for
newsgroup purposes only.
"Strunk" <Strunk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6BAFA97E-A2EC-47CC-A818-19D3202C1927@xxxxxxxxxxxxxxxx
> I'm using a Symantec Security gateway 5640 appliance box.
> As far as i know it don't operate on the application layer like
> ISA can.
> I can't install a certificate on the appliance box.
>
> -- > /Strunk
>
>
> "Bharat Suneja [MSFT]" wrote:
>
>> What firewall are you using? Does it look at the application layer >> (like
>> ISA)? Do you need to install a certificate on firewall/appliance (as >> you
>> need to if you're using ISA)?
>>
>> -- >> Bharat Suneja
>> Microsoft Corporation
>> ------------------------
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights. Please do not send email directly to this alias. This alias is
>> for
>> newsgroup purposes only.
>>
>>
>> "Strunk" <Strunk@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:CEE07626-E20D-4C9B-957D-284B711C9F71@xxxxxxxxxxxxxxxx
>> > Hello All,
>> >
>> > I have a ?.
>> > I currently have a CAS server setup on our LAN with the internal >> > URL:
>> > https://cas1.mydomain.local/Microsoft-Server-ActiveSync
>> >
>> > As that URL can not be used from the Internet i would like our >> > mobile
>> > devices to use https://mobile.domain.com/Microsoft-Server-ActiveSync
>> > for
>> > access to the ActiveSync. Our Firewall would then handle the ip
>> > translation
>> > (not an ISA server) and redirect the
>> > https://mobile.domain.com/Microsoft-Server-ActiveSync
>> > to the internal URL
>> > https://cas1.mydomain.local/Microsoft-Server-ActiveSync.
>> >
>> > Would that be possible and which URL should be used for the SSL >> > cert.
>> > ???
>> >
>> > If possible could someone point me in the right direction for >> > setting
>> > this
>> > up ?.
>> >
>> > -- >> > /Strunk
>>
>>
.
- References:
- E2K7, ActiveSync and SSL
- From: Strunk
- Re: E2K7, ActiveSync and SSL
- From: Bharat Suneja [MSFT]
- Re: E2K7, ActiveSync and SSL
- From: Strunk
- Re: E2K7, ActiveSync and SSL
- From: Bharat Suneja [MSFT]
- Re: E2K7, ActiveSync and SSL
- From: Strunk
- E2K7, ActiveSync and SSL
- Prev by Date: Re: Forwarding Previous Employee's Email to Replacement
- Next by Date: exchange event id : 5000
- Previous by thread: Re: E2K7, ActiveSync and SSL
- Next by thread: Outlook not connecting
- Index(es):
Relevant Pages
|
