OWA AND PIX 506E

[br0ck]

What is the best practice for setting up company access to OWA with a PIX 506e with out using VPN

I would love it if there was a way to set up AAA to prompt for a password (using IAS) when there is a request for the ip of the owa server

Can this be done like that

What needs to be considered?

Any links or advice

Thanks in advance
Brock D. Mowry
Hardware Specialist

http://www.iNECTA.com

 

[sfrank8734]

What's wrong with using OWA with SSL? You get encryption, passwords are enforced by the application.

 

[br0ck]

any links or info i can look at on that setup ?!? Brock D. Mowry
Hardware Specialist

http://www.iNECTA.com

 

[baddos]

I use SSL for mine. Make an asp page like this for the default page.

I.E. default.asp:

<%@ Language=VBScript %>
<% Response.Redirect (&quot;

https://owa.someco.com/exchange/logon.asp&quot;)

%>

 

[br0ck]

guys,
what do your access-list statments look like for this config ?

i cann't get it working with the pix

here is what i have :

static (inside,outside) OWAPUBIP EX_SERV netmask 255.255.255.255 0 0


access-list 100 permit tcp any host OWAPUBIP eq https (hitcnt=8)
access-list 100 permit tcp any host OWAPUBIP eq

http://www (hitcnt=2)

i get &quot;The page cannot be displayed&quot; error

Brock D. Mowry
Hardware Specialist

http://www.iNECTA.com

 

[br0ck]

ok fixed the access-list problem

(no need for the http)

Now i'm having an OWA problem I get the e-mail's but i get pic boxes with red X's in them in the buttons on the page like the page doesn't load fully?

I'll post that in the exchange forum

Thanks
Brock D. Mowry
Hardware Specialist

http://www.iNECTA.com

 

[sfrank8734]

I'd guess it's something in your OWA installation not being quite correct, not a pix issue.

 

[br0ck]

well it's working fine now and I cahnged nothing

?

oh well

I think it was a browser issue Brock D. Mowry
Hardware Specialist

http://www.iNECTA.com