Re: ISA & External Web access to default website and RWW

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Kevin Weilbacher [SBS-MVP] (kweilbacMVP_at_gte.net)
Date: 12/05/04 

Date: Sun, 5 Dec 2004 14:18:55 -0500

After installing ISA and rerunning CEICW, access from theoutsaide should
work. Generally, when people have a problem with accessing RWW or OWA from
the outside, it's usually caused by setting up the SSL certificate
incorrectly. Whatever you are using (name or op address) to access your
server from the outside, you need to use the same for setting up your
certificates.

Then, to access your server, be sure you use https -- and not http
So, https://yourservername.com/remote or https://yourservename/owa

Secondly, simply opening up and directing more ports is not a solution. And
if port 4125 (for example) is required, then opening up ports 4124-4126 as
well, doesn't help you at all. You definetely do not need to forward port
80. 

-- 
Kevin Weilbacher [SBS-MVP]
"The days pass by so quickly now, the nights are seldom long"
"Alex Georgevitch" <AlexGeorgevitch@discussions.microsoft.com> wrote in 
message news:E1DF7763-84D2-4D36-96F6-E8F46971C911@microsoft.com...
> Boy am I having headaches.  I have a client computer that was running 
> SBS2k3
> (premium but no ISA installed).  We wanted to control access to the 
> internet
> so we installed ISA.  Everything went pretty smoothly, I re-ran the ICW 
> and
> everything seemed to work fine.  But when I tried to connect from the 
> outisde
> to the default web page (the page that gives you the option to go to the
> internal website, and more importantly RWW) I get denied.  I could not get
> any pages working.  I made sure I was forwarding ports to the server from 
> the
> router provided from the DSL provider. I have forwarded ports 25, 80, 443,
> 444, 3389, 4125 and quite a few others (usually in a range on either side 
> of
> those).
>
> I have been trying to read up on isaserver.org as well as in this 
> newsgroup
> and I see that there are many things that need to be set.  I did at one 
> point
> have the default web page open but could not go anywhere from there.  The
> primary purpose of this page is to get to the RWW so one of the employees 
> can
> remote in from work.  I noticed there is some specific language about the
> certificates but I am not exactly sure how that is affecting this from
> working.  We are trying to access the site with just an IP address, FWIW.
>
> A couple of questions.  Shouldnt the ICW handle everything in ISA if run
> properly?  I have looked at KB 838304, but this appears to be for the
> //companyweb site, I am trying to get RWW through the default website.  Is
> there a step by step for SBS to connect the defaul or remote web sites? 
> Do I
> need to change my certificate to something with my IP address in it?  It
> seems like the ICW would set all of this, is it just me? (OK, dont answer
> that one).
>
> Please help!  Thanks in advance...
>
> Alex

Relevant Pages

  • Re: OWA and RWW from outside the domain
    ... When you ran CEICW did you assign your Certificate to FQDN or IP Address? ... Did you rerun CEICW after installing ISA? ... >> I have clients who want to use OWA and RWW from outside the domain (home, ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Web Workplace
    ... what are the ports I should open? ... Run CEICW to configure RWW and your certificate ... Open up your router for the appropriate ports ...
    (microsoft.public.windows.server.sbs)
  • RE: RWW ports?
    ... Thank you for posting in the SBS newsgroup. ... protocols and ports are needed for in Remote Web Workplace. ... Additionally, if you want to configure RWW access, please refer to the KB ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.sbs)
  • Re: RWW Is this possible with one NIC?
    ... I will double check these configurations on our Sonic Wall. ... Even though the CEICW says it will open the ports on the router, you need to check it yourself. ... Secondly, possible, but not probable, that either your isp or your router will not allow the necessary trafic for RWW. ...
    (microsoft.public.windows.server.sbs)
  • Re: is RWW installed and working
    ... limit what the endusers have acccess to when they use RWW. ... I'll check on what ports are open. ... If I VPN into my server, then start a Terminal Service session to ... We are running Exchange server on this SBS server. ...
    (microsoft.public.windows.server.sbs)