RE: ISA 2004 Firewall Client and ActiveSync 4.2

Hi all,

exact the same with me. I had a working configuration with a MDA Vario from
T-Mobile, Germany, where I configured first via VPN and a selfsigned
Certificate from my E2K3. But because of GPRS traffic was going on even
though I was connected in a Wireless Lan I changed my configuration. Now
since friday I am able to sync via two SSL connections and my ISA2004 and
without VPN. I use an imported certificate from my own Root CA on the MDA.
MDA ->SSL-> ISA2004 -> SSL -> E2K3
But since that time it lost its ability to sync via USB (error 85010016). I
also tried the possibilties that are mentioned in Shijaz article but that
does not help. And I must say, that killing my default gateway is not the way
I could accept as the last answer.

Regards Thomas

"Jim B" wrote:

Shijaz, changed my TCP/IP settings to a static address with no default
gateway and the appropriate DNS server entries. Re-installed the FWC.
Rebooted but I still continue to receive 85010016 error. Ipconfig /all
reveals default gateway empty.

Another desktop with a Moto Q installed and AS 4.2 has the same problem.

"Shijaz" wrote:

What is the default gateway on the client machine? If it is set to the ISA
server internal IP then your client works as a secureNAT client and you're
still not bypassing ISA.

Remove the default gateway and try again.

--
Shijaz
MCSE:Security, CCNA
www.shijaz.com/isaserver


"Jim B" wrote:

Shijaz, thanks for the suggestions. Did the things suggested but still
receive the same error.

Any other suggestions?

Thanks.

Jim Boettger

"Shijaz" wrote:

Activesync error 0x85010016 occurs when:

An error response was received from the HTTP gateway.
- OR -
Synchronization failed due to an error on the server.
Verify that the gateway is available and try again.
The device is using a proxy server to connect to the Exchange Server. The
proxy server encountered an error.

[See: Activesync error codes
http://www.shijaz.com/exchange/activesync_errors.htm ]

Make sure the option to bypass proxy to access local addresses is disabled
on your browser. If the problem persists, you need to prevent requests from
being sent through the proxy while using Firewall Client. See
http://www.shijaz.com/isaserver/bypass_isa.htm
--
Shijaz
MCSE:Security, CCNA
www.shijaz.com/isaserver


"Jim B" wrote:

Trying to sync a Cingular 8125 with AS 4.2 and USB connection on a WIndows XP
SP 2 computer to an Exchange 2003 sp2 server. Receive error 85010016.
Have no problems wirelessly.

Narrowed the problem down to the ISA 2004 Firewall Client. If I uninstall
the FW client I have no problems syncing. Install it and syncing fails again.

Any thoughts on why the FW client would be blocking syncrhonization?

Thanks in advance for any insight.

Jim

.

Relevant Pages

  • RE: ISA 2004 Firewall Client and ActiveSync 4.2
    ... at home in my WLAN all internet ... that killing my default gateway is not the way ... gateway and the appropriate DNS server entries. ... server internal IP then your client works as a secureNAT client and you're ...
    (microsoft.public.isa.clients)
  • Re: Build up NAT/VPN Role Server
    ... Ifyou are not running Active Directory you do not need to set up DNS. ... use the NAT server as a DNS proxy (by configuring that option on the RRAS ... > upload) 2 Client running Windows XP Pro ... > Gateway = Not Set ...
    (microsoft.public.windows.server.networking)
  • Problem joining Windows domain from remote VPN/PPTP box
    ... server OK with administrator rights (configured via Routing and Remote ... On client there exists static route for remote network that points to ... following information can help you troubleshoot your DNS configuration. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Outlook -> remote exchange -> always wants a password
    ... I have my server set to use Integrated Windows authentication over SSL. ... almost certainly "break" your existing users if the client setup does not ... Close out of these configuration dialogs, ...
    (microsoft.public.windows.server.sbs)
  • Re: 70-294 next week
    ... to another DNS ... server for at least ... client, which then ... configuration on the client. ...
    (microsoft.public.cert.exam.mcse)