Are you using Forms Based Authentication for OWA? If so that will be the issue. ISA/TMG falls back to basic when FBA is used. Use this workaround:-
http://blog.msfirewall.org.uk/2008/07/publishing-exchange-2007-services-with.html It's a bit lengthy and you'll need to use two public IP addresses. The blog says not to use a Wildcard cert but I was able to use one by setting the Certprincipalname:- http://technet.microsoft.com/en-us/library/cc535023(EXCHG.80).aspx I pulled my hair out(thankfully it grew back) for a long time with this issue so I hope this info helps you. James. From: Tobie Fysh [mailto:tobie.f...@freebridge.org.uk] Sent: Wednesday, 8 December 2010 6:52 PM To: MS-Exchange Admin Issues Subject: EX2007 Outlook Anywhere Hi all, I'm tearing my hair out trying to get Outlook Anywhere to run - please help :) Environment: * ISA 2006 SP1 * Exchange 2007 SP3 * SAN Certificate (Digicert) o owa.freebridge.org.uk o ExServerNetBios o EXServer.FQDN o autodiscover.freebridge.org.uk * 2 External IP Addresses (Autodiscover & OWA) Using the Exchange Publishing Wizard in ISA I've had ActiveSync and OWA working since year dot and thought it was high time to get RPC over HTTPS working (especially now we have OCS2007 here). I blew away all the rules for Exchange in ISA and started from scratch, I can get OWA, ActiveSync and Autodiscover to work without a hitch but RPC over HTTPS continually fails stating that it expects to find NTLM authentication but has found Basic. (this is by using the www.testexchangeconnectivity.com<http://www.testexchangeconnectivity.com> tool). Using the Get-OutlookAnywhere PS command it shows NTLM :( I feel like I've read everything that there is to read but feel like I'm missing something that is core in the ISA build. Regards [cid:image001.gif@01CB9B6B.F14DBA00]<sip:tobie.f...@freebridge.org.uk>Tobie Fysh Systems Developer Direct Dial: 01553 667796 Email: tobie.f...@freebridge.org.uk<mailto:tobie.f...@freebridge.org.uk> [cid:image002.gif@01CB9B6B.F14DBA00]<http://www.freebridge.org.uk> [cid:image003.gif@01CB9B6B.F14DBA00]<http://twitter.com/Freebridge> [cid:image004.gif@01CB9B6B.F14DBA00]<http://www.facebook.com/pages/Kings-Lynn-United-Kingdom/Freebridge-Community-Housing/192690183387?v=box_3> This e-mail (including any attachments), is confidential and intended only for the use of the addressee(s). It may contain information covered by legal, professional or other privilege. If you are not an addressee, please inform the sender immediately and destroy this e-mail. Do not copy, use or disclose this e-mail. E-mail transmission cannot be guaranteed to be secure or error free. The sender does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard copy version. Freebridge Community Housing Ltd is a Charitable Industrial and Provident Society - Reg No IP29744R Registered with the Housing Corporation - No L4463. VAT Registration Number 860762121 Freebridge Community Housing, Juniper House, Austin Street, Kings Lynn, Norfolk PE30 1DZ ________________________________ This email message has been scanned for viruses by Mimecast. Mimecast delivers a complete managed email solution from a single web based platform. For more information please visit http://www.mimecast.com ________________________________ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
<<inline: image001.gif>>
<<inline: image002.gif>>
<<inline: image003.gif>>
<<inline: image004.gif>>
