Problem publish EV 10 owa archived attachments behind Bluecoat SG210

 no one?

did you notice that you posted this as private? your audiance is much smaller when you do it this way.

thanks AndrewB! I´ll change it

Can you enabled OWA logging on the CAS server please? Trace one for internal connection and trace one for external connection and compare the two logs.

Has the BC fireware setup to forward HTTP and HTTPs traffic to/from the CAS servers, EV server and the BC firewall?

Thanks for reply LCT.

I will ask the Exchange admin to do so. It´s a single exchange 2010 installation. all roles on one server.

Regarding the BC setup OWA only works fine so forward traffic to the CAS works fine.(webmail.company.com)

The BC admin has also done a forward to the EV (webmail.company.com/enterprisevault) and the adress is in the Ev desktop policy, with proxy setting on. And syncing vault cache works. 

One question do I need to publish the EV in the firewall to get this working? dont EV inject data to the CAS server that generate the data correctly? Or does the user client (IE,crome ect.) need to contact EV direct?

1. Enable dtrace logging on the Enterprise Vault server for the following processes:
W3WP
Authserver
DirectoryService
ShoppingService
StorageRestore
AgentClientBroker
RetrievalTask

For instructions on enabling dtrace: http://www.symantec.com/docs/TECH38122
2. Reproduce the problem with OWA.
3. Stop dtrace logging on the EV server.
4. Gather the dtrace log and IIS log from the EV server and the OWA log from the CAS server and post here for review.

Check the configuration on CAS Server for OWA and verify the settings.

Check the following Technote.

http://www.symantec.com/business/support/index?page=content&id=TECH60712&actp=search&viewlocale=en_US&searchid=1338360912561

http://www.symantec.com/business/support/index?page=content&id=TECH141519

As per the logs which you posted below its showing that your are using Mozilla, Please note that only IE is supported by EV to access archive email from OWA, other browsers like Mozilla Firefox, Chrome are not supported.

My college managing the BC proxy also wanted me to post this:

2012-05-24 13:45:01 20 212.247.95.61 - - - PROXIED "none" https://webmail.xxx.xx/owa/?ae=Item&a=Open&t=IPM.Note.EnterpriseVault.Shortcut&id=RgAAAACdqEnpmcmzSo%2fJ97xc7otqBwCngDLsBTEASbqdUB0VB%2bEuAAAAxLuLAACngDLsBTEASbqdUB0VB%2bEuA

AAAxLvrAAAJ&pspid=_1337866556159_518344619  304 TCP_HIT GET application/x-javascript https webmail.xxx.xx 443 /owa/14.2.247.5/scripts/premium/freadmsg.js - js "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_4) AppleWebKit/534.57.2 (KH

TML, like Gecko) Version/5.1.7 Safari/534.57.2" 192.168.xx.xx 368 993

Yes I know IE is only supported, but I can sucsessfully use owa with EV ad-on internaly with Chrome.

One question do I need to publish the EV in the firewall to get this working? dont EV inject data to the CAS server that generate the data correctly? Or does the user client (IE,crome ect.) need to contact EV direct?

The OWA client i.e. IE or Chrome or whatever only need to connect directly to the EV server if you are using the Search and Archive Explorer via OWA, otherwise the OWA extensions on the CAS server will handle other/normal EV requests. Normally you don't need to publish the EV on the BC firewall as the requests are being handled by the OWA publising rule, as mentioned already unless you are planning to use Search and Archive Explorer.

I would get your BC guys to to check the traffics between EV server, CAS servers and the BC firewall. We had the same issue as we also use BC firewall and after all the rules are checked on the BC firewall everything was working fine. Were you able to enable the OWA log on the CAS server? and compare the working and non-working logs? Also I would be intersted to see yoir web.config on your CAS server as this will be a start to your problem troubleshooting.

internall and external config will depend on what you have configured in the web.config, assuming that the BC firewall is all configured correctly.