Windows Forum

Ask something
Discussion Locked

Outlook Web Access

0 helpful
8 replies

by r bailey

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We have Outlook Web Access loaded on an IIS server OUTSIDE of the firewall. The Exchange server and domain controller are on the INSIDE of the firewall. We have opened up 3 ports between the IIS server and the Exchange server in the firewall but OWAwon't work because the usernames/passwords won't authenticate. Keep getting HTTP Error 401.1 Unaurthorized:Logon Failed.
Do we also need to open ports in the firewall between the domain controller and the IIS server so the usernames can be authenticated?

Running Exchange 5.5 SP3
Running IIS 4.0 on an NT 4.0 server

Any suggestions would be great.

8 replies

by green lantern

First, which logon is failing? The IUSR_servername or the domain user?

The domain user should not have to authenticate against the domain but against the Exchange server which can have an entirely different password from the domain's.

IUSR_servername is the logon id used by your IIS server to allow ananymous access. Which type of acces do you setup?

And the user access between your OWA and the domain may be the break point. This is the pass through between your firewall and the domain. This should be a single account with access to your domain from the OWA server.

You only need one port open between your OWA and the Exchange server - port 80. Unless you are using SSL and then you need that specific port open (I'd tell you what it is but I don't have my book in front of me.) Read your documentation, you do not need ports 137,138 nor 139 open, this constitutes a breach of your firewall! Thats why OWA was developed in the first place.

ralph

by curlergirl

There are a number of issues you need to check with firewalls OWA on the other side of a proxy or firewall. Here are some TechNet articles that I found useful. They refer specifically to MS Proxy Server, but I believe the principals would be the same as any firewall with packet filtering: Q175891, Q259240, Q239485. Hope this helps!

by shmaltz

1. Your OWA server needs to be able to authenticate with your domain.

2. If your OWA server is located on different computer than the Exchange server, then you cannot use Intergrated Authentication and you must use either: SSL or: basic authentication.

This discussion is closed to new replies.