This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

one IP, UserPortal running on 443 and Exchange OWA with WAF

Hi,

I'm trying to have the user portal and WAF running on the same port.
Exchange is published using WAF and it's working fine.
mail.company.com on 443

When I try to enable the User Portal the UTM tells me that the port is already in use.

Is there any workaround for that? Like setting the user portal to another port and then use waf to connect to that when connecting to utm.company.com or so?

I do have only one public ip and can't use a different port then 443 when comming from external.

Thank you in advance!
Kind regards
wolfman

This thread was automatically locked due to age.

0 BAlfson over 12 years ago

Why not use 1443 for the User Portal?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Wolfman over 12 years ago in reply to BAlfson

because most times I'm at customer sites which only have 80 and 443 allowed for outgoing traffic so I can't connect to this port...
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

There is no workaround with IPv4. You might consider adding IPv6 capability or additional IPv4 IPs.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Wolfman over 12 years ago in reply to BAlfson

ok, thank you!
kind regards
wolfman
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 12 years ago

But, instead of using a DNAT for OWA, why not use port 443 for the SSL VPN? Once you're connected to it, you can access OWA on it's local IP, and the User Portal can be accessed at the internal IP of your Astaro. That way, you could DNAT 2443 to 443 on OWA and set the User Portal for 1443. If a customer blocks 1443/2443, just fire up the VPN and run those packets through the tunnel where they won't be blocked. Ginge es so?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 Wolfman over 12 years ago in reply to BAlfson

Leider geht das nicht so.
Thanks for sharing the idea. If've several external users connecting which are not allowed to use VPN. Also I use Outlook Anywhere, an it's not best practice to use it over VPN...
I guess I need the second IP anyway...
Thanks
wolfman
Cancel
Vote Up 0 Vote Down

Cancel