Re: activesync and exchange http



Hi Duke,

Thanks for posting in our newsgroup.

From your description, I know that you the Mobile and Outlook via RPC over
Http users experience slow performance. If that's not right, please don't
hesitate to let me know.

First if you have large number of mobile and Outlook users, the remote user
may experience slow performance, which is expected behavior. It also occurs
when the ISP network traffic is slow.

Based on my research, please take the following steps to narrow down this
issue:

Step 1: The problem may be caused by network configuration. Please rerun
the CEICW wizard to configure the network.

1. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.

2. Click the "Connect to the Internet" link.

3. On the "Web Server Certificate" page, choose to create a new Web server
certificate and then type the public FQDN that you will use to access OWA
(for example, if your public FQDN that you use to access the sites is
mail.domain.com, you should type mail.domain.com as the new certificate
name). If you already requested a certificate with the name
"mail.domain.com" from a third party CA, you can choose "Use a Web server
certificate from a trusted authority" and then import the certificate.

7. Go through the remaining steps.

Step 2: Please modify the following registry keys which relate to the
heartbeat interval:


HKLM\System\CCS\Services\MasSync\Parameters

MinHeartbeatInterval DWORD 60
MaxHeartbeatInterval DWORD 2700
HbiSampleSize DWORD 200
HbiAlertThreshold DWORD 480

After this restarted the IIS and try again.

More info:

Deploying Windows Mobile 5.0 with Windows Small Business Server 2003
http://www.microsoft.com/technet/prodtechnol/sbs/2003/deploy/winm5.mspx

For the configuration of Cisco firewall, since that's third party product,
please contact the manufacture for more help. Thanks for your understanding.

If the problem persists, please help me collect the following information
for deep research:

MPS Report

1) Download MPS report tool from:
http://download.microsoft.com/download/b/b/1/bb139fcb-4aac-4fe5-a579-30b0bd9
15706/MPSRPT_SETUPPerf.EXE
2) Run the MPSRPT_SETUPPerf.exe on the server box.
3) Wait for 10~15 minutes.
4) Open Windows explorer, navigate to
%SYSTEMROOT%\MPSReports\Setup\Reports\cab\
5) Send the .cab file to v-robeli@xxxxxxxxxxxxx with subject:
40919232-activesync and exchange http.

I am looking forward to hear from you.

If you need further assistance, please don't hesitate to let me know.

Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<Thread-Topic: activesync and exchange http
<thread-index: AcggiX23tdo2+ZZJTWGZ98tS1/SHzg==
<X-WBNR-Posting-Host: 207.46.192.207
<From: =?Utf-8?B?ZHVrZQ==?= <duke@xxxxxxxxxxxxxxxxxxxxxxxxx>
<References: <A4334283-F91D-4FB8-9800-5A624CEB533A@xxxxxxxxxxxxx>
<eoaGBqCIIHA.5360@xxxxxxxxxxxxxxxxxxxx>
<Subject: Re: activesync and exchange http
<Date: Tue, 6 Nov 2007 07:27:07 -0800
<Lines: 69
<Message-ID: <46F6989A-5151-47E0-8B5F-BCFC8E58626E@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 7bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:74065
<NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<hmmm my PIX has many timeout options. none of them http. Does anyone know
if
<any of these options affect http requests? Next to them I'll list my
current
<settings.
<
<connection -- 1 hr
<H.225 -- 1 hr
<H.323 -- 5 min
<SIP -- 30 min
<SIP Media -- 2 min
<MGCP -- 5 min
<SIP Media -- 2 min
<SIP Disconnect -- 2 min
<Authorization absolute -- 5 min
<Authorization inactivity -- no timeout enabled
<Half-closed -- 10 min
<UDP -- 2 min
<RPC -- 10 min
<Translation Slot -- 5 min
<SIP Invite -- 3 min
<
<I know what some of these do already but I wanted to go ahead and put the
<full list of PIX timout options in case anyone has any advice.
<
<
<
<
<"Lanwench [MVP - Exchange]" wrote:
<
<> duke <duke@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
<> > We have many employees out in the field that either use our push
<> > services on their phones or get their email in outlook through http.
<> > Lately our performance has been horribly slow in receipt to both.
<> > Looking through logs i have several events dialy regarding a similar
<> > report:
<> >
<> > "The average of the most recent [200] heartbeat intervals used by
<> > clients is less than or equal to [540]. Make sure that your firewall
<> > configuration is set to work correctly with Exchange ActiveSync and
<> > direct push technology. Specifically, make sure that your firewall is
<> > configured so that requests to Exchange ActiveSync do not expire
<> > before they have the opportunity to be processed. For more
<> > information about how to configure firewall settings when using
<> > Exchange ActiveSync, see Microsoft Knowledge Base article 905013,
<> > "Enterprise Firewall Configuration for Exchange ActiveSync Direct
<> > Push Technology"
<> > (http://go.microsoft.com/fwlink/?linkid=3052&kbid=905013).
<> >
<> > Our network is set up with a single (hardware) firewall on the out
<> > with network and SBS behind. The SBS only has one NIC so i do not
<> > have ISA running, and the referenced article at microsoft is about
<> > adjusting the ISA firewall. So does the warning apply?
<>
<> Yes.
<>
<> "We recommend that you increase the firewall time-out values for HTTP(S)
<> requests to the Exchange Server Microsoft-Server-ActiveSync virtual
<> directory to provide a richer, "always-up-to-date" experience. The
method
<> that you use to increase the firewall time-out values depends on which
<> firewall product you use. Refer to the firewall documentation for
<> information on about how to increase the firewall time-out values."
<>
<> > Do i need to
<> > make adjustments in our cisco firewall for Push Mail?
<>
<> Yes, you should. It's easy enough.
<>
<>
<>
<>
<

.



Relevant Pages

  • Re: For Microsoft Partners and Customers Who Cant Download or Access
    ... to reconfigure the firewall, but to use a static IP on your client ... and to make sure that the DNS server entries on the client are ... Microsoft for msdn2.microsoft.com. ... use a static IP and set the DNS server addresses to the DNS ...
    (microsoft.public.dotnet.general)
  • RE: SBS2003, ISA & eBay...
    ... On the ISA Server computer, stop the Microsoft Firewall service. ... How to delete the Web cache in Internet Security and Acceleration Server ... In the Internal Properties dialog box, click the Web Browser tab. ...
    (microsoft.public.windows.server.sbs)
  • RE: Sending mail via RPC over HTTP
    ... Microsoft CSS Online Newsgroup Support ... Server. ... Sending mail via RPC over HTTP ...
    (microsoft.public.windows.server.sbs)
  • RE: Is this as bad as it seems?
    ... The network being protected by the router or firewall is still vulnerable to ... > circumvented - the administrator has explicitly allowed HTTP traffic on ... this exploit has the effect of allowing the attacker to send *INBOUND* HTTP ... The HTTP server (located on the internal network or anywhere else that is ...
    (Security-Basics)
  • Re: RPC over HTTP
    ... I will help you with the PRC over Http issue in this thread. ... and go through the Internet option. ... On the Web Server Certificate page shows. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)