Re: http to https redirect for OWA

anonymous_at_discussions.microsoft.com
Date: 08/24/04 

Date: Mon, 23 Aug 2004 17:17:38 -0700

Bruno:

Thanks for your reply. What I want to accomplish is if
my users type http://server.domain.com/exchange in their
web browser it automatically goes to the secure
https://server.domain.com/exchange OWA website. See KB
Article 555126. This however does not work outside the
ISA server. Their has to be away to accomplish this
beacuse I have a Server running Small Business Server
2003 with ISA installed and that how it works out of the
box. I have looked at the ISA configuration on that
server and I can't see anything different.

Regards,

Rob Korzuch

>-----Original Message-----
>Robert Korzuch wrote:
>| My users keep forgetting to type https in their web
>| browser to securely connect to outlook web access and
>| therefore get the SSL error message. I have read KB
>| Article #555126 and have implemented the changes.
>| Everything works fine internally (inside the firewall
>| (ISA Server 2000 SP1)) but user get the same SSL error
>| message when they try to connect externally (outside
the
>| firewall). Everything works fine if I uncheck
>| the "Require secure channel (SSL)" checkbox on the
>| Exchange and Public virtual directories but it is not a
>| secure connection. Is there a way in ISA to redirect
>| http request to https for the OWA website? I tired of
>| getting phone call in the middle of the night because a
>| user can't read his email.
>
>Hi Robert,
>
>Correct me if i'm wrong (hey Thomas Shinder :) )
>If you set up HTTP to HTTPS what does it mean ? it means
that the HTTP
>request from your external client will go thru a HTTPS
(SSL tunnel). Well,
>my thought are the following : http will go from client
to ISA plain text
>(wow) and SSL from ISA to OWA (mmm ok).
>Kinda dangerous imho. Cause maybe you doesnt trust your
LAN/DMZ, it's really
>ok to do this.
>What you should do is to not trust (not at all ever)
Internet side.
>I guess the best way would be to do some communication
to your customers /
>users and explain em they have to put a https so they
will be in a secure
>environnement.
>
>I hope it helps in any way.
>
>Regards
>
>--
>Tenez nous au courant
>
>cordialement,
>
>Bruno GUERPILLON
>http://isa.gerpion.com
>
>
>.
>

Relevant Pages

  • RE: ISA 2006 and SSL
    ... Because the ISA 2006 is a new ... | 3) From your port I am reading things about publishing to a web server. ...
    (microsoft.public.isa)
  • Re: Secure Web Server publishing.
    ... When you use https on is you must export the certificate from your webserver and import it to the isa. ... How do i go about this as I have no control over the Unix server itself, ...
    (microsoft.public.isa.configuration)
  • Re: MS ISA any good?
    ... If its set up properly, it can be pretty secure, ... ISA server is ... both a firewall and a proxy server, taking the job of preventing intrusions, ... > security device, as well as providing web cache services. ...
    (comp.security.firewalls)
  • Secure WebAccess
    ... W2K3 Server mit EX 2003 ... Provider leitet Ports 80 und 443 zum ISA durch ... Zugriff von Außen erfolgt über IP ohne Namesauslösung. ... Webaccess ohne HTTPS funktionierte problemlos. ...
    (microsoft.public.de.german.isaserver)
  • RE: 504 Proxy timeout only with SSL traffic
    ... We have two ISA 2004 Servers both at same level of service packs which is ... server for ISA 2004. ... access the HTTP but not HTTPS pages, can you access the HTTPS pages directly ... Can you access HTTPS pages locally on the webserver is what we need to look ...
    (microsoft.public.isa)