Any success using Vault Cache with RPC/HTTPS ?

[BigPhil]

Has anybody got it to work yet?  Here is my environment:

Exchange 2007 SP1 Rollup 6

1 HUB/CAS server, Windows 2008 x64

2 node CCR Cluster, Windows 2008 x64

EV 8, Windows 2003 SP2

ISA 2006 SP1

I have tried for days and days to get this to work, but everything I have tried does not work.  The vault cache will only update when Outlook is connected to the internal network. I have tried following the article seer.entsupport.symantec.com/docs/305637.htm and seer.entsupport.symantec.com/docs/316191.htm but neither fix the issue.  Everything else through ISA works great...OWA, Archive Explorer, Search Archives, item retrieval/archival/delete, just not the vault cache. when I set the desktop policy > outlook > "rpc over http connection" to "Direct" and I look at the vault cache properties, the status says "Failed: Item retrieval failed on server" and when I have it set to "Use Proxy" the status just sits at "Synchronizing" but it never does anything.  Has ANYONE got this to work yet!!!??? Thanks for any help received :)

[Johann]

Hi BigPhil

please check

Policys - Desktop - Advanced - Outlook - RPC over HTTP restriction is not set to "Disable user extension" (default) - use none

hop that helps

[BigPhil]

@Johann:

The setting you mentioned I already had set to "None" and it didnt work. I even went as far to add our EV site name to our UC certificate that we use to publish Outlook Anywhere, OWA, EV, but that didnt work either.  Any other ideas?  Do you have this working in your environment?

[Johann]

@ BigPhil

not at the moment but planned.

did you check the ev client log?

check out this link, maybe this helps you

http://www.shudnow.net/2008/06/24/publishing-symantec-enterprise-vault-in-isa-2006/

Johann 

[BigPhil]

@Johann:

I went to the link you posted and it is basically the same content...whats funny is it appears that the article posted by Symantec used the pictures from Elan's log (look at the link translations pictures from the link in my first post ;-)...so, I have essentially followed that article, but from Symantec's site and still no luck.  I wonder if ANYONE out there has gotten Vault Cache to work through ISA 2006 SP1. Everything else works perfectly, just not VC :( Thanks for helping out!

[BigPhil]

I'm still tyring to get this to work properly, but still the same error in the Outlook client > Vault Cache properties > Content Synchronization > Current status: Failed: Download Failed.

Has anyone got this to work yet?  I tried putting the desktop policy for RPC connections back to "Direct" and adding the proper records to my HOSTS file but still no luck...ISA rules are fine as I can navigate to http://evserver/enterprisevault but vault cache still fails.

[TonySterling]

You may have already seen this but I wanted to be safe.  :)

http://support.veritas.com/docs/318089

[BigPhil]

@TonySterling

Thank you for the article...I havent seen that one, but have found others that have the same instructions.  I have configured everything as they say...set the policy to "Direct", I can get to http://InternalSiteName/EnterpriseVault from outside, but still Vault Cache says failed.  ALL other EV operations work flawlessly using RPC/HTTPS from Outside. I even went as far as to add a new san name to our UC certificate with the internal site name as a new record, but that did no good either.  Would the Outlook client logs provide any information that could help?  I have gone through them myself, but dont see any issues....I could be overlooking something though.

[Johann]

Hi BigPhil,
Finaly we got it work.
Our enviroment - EV 8.0.1, EX 2007 (single box), ISA 2006 Sp1.
What we have done - RPC over HTTP = Direct, no Proxy URL
ON ISA Server published the OWA and Evserver described in this document - http://support.veritas.com/docs/305637
Published evserver on external DNS, on ISA allowed http traffice to evserver. (NTML authentication)
Form Based authentication enabled on ISA for listener.
The only thing that we have is to validate two times for sync.
For troubelshooting the client, hold down ctrl+shift - click on any ev icon in outlook. Set the logging level to maximum - restart outlook - check the log.
Hop that helps.
Johann

[Johann]

Hi BigPhil,
please check also on ISA Server the listener for Exchange
allow Port 80 - authentication - enhanced properties page - allow client authentication over http
Johann

[BigPhil]

@Johann

thanks for the info...I have read all the article on this subject, but will go through and double check my work and your suggestions above.  one thing i noticed is that the "allow client authentication over http" is greyed out and unable to check the box. I found what makes this box an option...on the "Connections" tab I have set "Redirect all traffic from http to https." what do you haev set on that tab?

[BigPhil]

I have checked and everything is setup correctly.  however, i did not change the setting to allow authentication over http because it says it will send passwords in an unencrypted state, which i cannot allow...it also messes with our other rules that authenticate with https.