RE: Remote Exchange Server Access broken



Hi Gary,

Thanks for your reply.

As I know, the firewall client application identifies the internal/external
traffic according to the LAT and the routing table. When the traffic is
identified as outgoing external traffic, it would be picked up by the
firewall client application and then sent to the ISA server. Since the
remote VPN network is not in the local ISA server's LAT (for ISA 2004, it's
the address range of internal network objects), the firewall client picks
up the traffic and send it to the ISA server. This caused the problem.
Generally speaking, to use a VPN client through the ISA server, we
recommend the client use SecureNAT mode. You may refer to the following KB
article for the detailed information:

838245 How to permit PPTP clients to access the external network through ISA
http://support.microsoft.com/?id=838245

283628 How to Enable PPTP Clients to Connect Through an ISA Firewall
http://support.microsoft.com/?id=283628

812076 How to enable a Cisco IPSec VPN client to connect to a Cisco VPN
http://support.microsoft.com/?id=812076

Also, you may try to add the remote LAN address range into the local ISA
server 'Internal' network address range. Go to the ISA server. Open ISA
Management console. Navigate to Configuration\Network. Open the properties
of the Internal network object. Add the remote LAN address range into the
object.

I hope the above information helps. If you have any questions or concerns,
please feel free to let me know. I look forward to your reply!

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "HARCAS" <gary.initiative@xxxxxxxxx>
| Subject: Remote Exchange Server Access broken
| Date: Tue, 18 Oct 2005 10:04:43 +1300
| | Newsgroups: microsoft.public.windows.server.sbs
||
| SBS2003, 2 x NIC, ISA2K setup. SBS2003 clients are WINXPSP2 and have been
| operating great for some months now.
| 2 x users have VPN access to a remote Exchange server and have been
| satisfactorily clearing mail via an Outlook profile since inception.
|
| Recently i added the firewall client as requirement for users to utilise
MSN
| Messenger, now as a result of installing the "Firewall Client" to allow
MSN
| Messenger the two particular users can no longer access the Exchange
| mailbox on the remote server via VPN. They used to be able to do this and
| can so long as the "Firewall Client" is disabled first.
| The VPN connects ok but when they start the remote Outlook profile they
have
| been using outlook is unable to find the Exchange Server they are trying
to
| connect to.
| Any ideas appreciated.
|
| Regards Gary
|
|
|

.



Relevant Pages

  • RE: Remote Exchange Server Access broken
    ... This newsgroup only focuses on SBS technical issues. ... | firewall client application and then sent to the ISA server. ...
    (microsoft.public.windows.server.sbs)
  • Re: Nortel VPN Client
    ... Turn off the firewall client from ISA. ... VPN negotiation and the actual tunnel cannot go through separate routes. ... If I run port 500 through ISA but run port 10001 ...
    (microsoft.public.windows.server.sbs)
  • REPOST: Firewall Client Disconnects
    ... Subject: Firewall Client disconnects? ... reported it was unable to connect to the ISA server. ... The Firewall Client is for ISA 2004. ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.sbs)
  • Re: REPOST: Firewall Client Disconnects
    ... -> Define Connection Limits ... Subject: Firewall Client disconnects? ... reported it was unable to connect to the ISA server. ... The Firewall Client is for ISA 2004. ...
    (microsoft.public.windows.server.sbs)
  • Re: REPOST: Firewall Client Disconnects
    ... >> Subject: Firewall Client disconnects? ... >> reported it was unable to connect to the ISA server. ... >> Thank you for posting to the SBS Newsgroup. ...
    (microsoft.public.windows.server.sbs)

Loading