Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 30 subscribers
  • Views 14949 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Exchange Outlook Anywhere WAF not working

jamesharper

Hi,

I have created a WAF rule to publish an Exchange 2016 server, and Outlook Anywhere is not working with the template rule. As a test I have created a rule with all exceptions enabled and still no success.

As best as I can tell the request hits the Exchange server HTTPS but then gets stuck and returns a short time later with an error. The time is about 30 seconds so it sounds like it's a timeout somewhere. I'm testing with rpcping which should return in a very small number of seconds. With an rpcping, if I put the server password in incorrectly I get the expected "unauthorized" response.

As far as I can tell all other aspects of WAF are working (owa, oab, etc)

I'm running 16.05.01 MR-1. I don't have any earlier firmware versions to test on.

Is this something that is expected to work?

Is anyone doing this successfully?

thanks

James



This thread was automatically locked due to age.
Parents
  • 0

    Hi James,

    I made this change and it worked for me (Exchange 2007):

    Web Server -> Protection Policies -> Exchange Outlook Anywhere -> Skip Filter Rules
     
    Add filters: 960032, 960035, 960904, 960911
     
    Maybe it will help you
  • 0 in reply to Adriano Almeida

    I got it working in the meantime by applying a protection rule with everything excluded except "Pass Outlook Anywhere". It seems that this is different to having no protection rule.

    I do want to enable all the correct protection again. Once the dust has settled I will try your solution.

    Thanks.

  • 0 in reply to jamesharper

    I all !

    i tried to apply the waf protection rule for my internal exchange, but i have the same kind of problems.

    if i active the exchange general protection policy, everything works, exept outlook anywhere...

    but if i add the same firewall rule with the outlook anywhere protection policy, i can't activate it..

    so what is the best way to activate exchange general+outlook anywhere protection ?!

    maybe we should "merge" the two rules for creating only one, but the parameters are not the same...

Reply
  • 0 in reply to jamesharper

    I all !

    i tried to apply the waf protection rule for my internal exchange, but i have the same kind of problems.

    if i active the exchange general protection policy, everything works, exept outlook anywhere...

    but if i add the same firewall rule with the outlook anywhere protection policy, i can't activate it..

    so what is the best way to activate exchange general+outlook anywhere protection ?!

    maybe we should "merge" the two rules for creating only one, but the parameters are not the same...

Children