EV mails need to open from outlook anywhere ( TMG2010)

[akther]

Enviornment

EV 9.0.2

Exchange 2010 sp1

TMG 2010

I want to connect ev mails through outlook anywhere. We have published rules in TMG 2010 ( https). But it's not working.

We have enabled rpc over http proxy URL settings in EV. Is there any other configuration need to enable?

Any firewall settings need to do? ( using cisco ASA)

Thanks

Akther

[TonySterling]

Did you follow the steps here: Article URL http://www.symantec.com/docs/HOWTO59068

[ZeRoC00L]

If it is still not working after the help of Tony, please post the client trace logs from a client connecting through the TMG server.

[akther]

I have followed the articled and did everything except web.conf in CAS server and import certificate from EV server. Appreciate if any body can help on above those

Thanks

Akther

[Rob_Wilcox1]

Yep, a client trace would help, I think.

[akther]

Hi

How to take client trace logs ?

[ZeRoC00L]

See here:

http://www.symantec.com/business/support/index?page=content&id=TECH38096

[Rob_Wilcox1]

http://www.symantec.com/business/support/index?page=content&id=TECH38096 << client trace.

[ZeRoC00L]

exactly the link I posted before you, why posting it again?

[TonySterling]

Relax!  Sometimes there are refresh issues with the forum and he simply may not have seen yours.

[akther]

Please find the log as attached.

[John_Chisari]

Well it can't connect to the EV server, as this is seen in the log  "Could not contact the EV web server using the RPC over HTTP URL http://webmail.farabipc.com/EnterpriseVault"

I think you just have to change the http over rpc proxy url to use HTTPS.

[akther]

Hi

I did that too. no way to get in.

[Rob_Wilcox1]

Does the trace with the https show:

16/10/2011 18:31:05.604[5684]: Could not contact the EV web server using the RPC over HTTP URL (https://webmail.farabipc.com/EnterpriseVault)

What happens if you put that URL in Internet Explorer?

[ZeRoC00L]

• Error Code: 500 Internal Server Error. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)

Must be something wrong configured on the TMG server.

[akther]

for TMG configuration i have followed as per the doc which Tony send. And in firewall(cisco ASA) its pointing from TMG--> to EV server.

[LCT]

Hi akther,

What happens when you put the URL into Internet Explorer from an external location? (What Rob asked) https://webmail.farabipc.com/EnterpriseVault. Does the URL get you to the TMG server? Does it prompt for the username and password (or FBA page)? What happens if and when you put the corerct username and password in?

Your TMG may be setup correct but I suspect either the Link Translation is not setup correctly in your publish rules or/and your web.config on your CAS servers are not setup correctly. Could you post your web.config so that we can take a look. and a screenshot fo your publishing rule? (of course feel free to take out private information).

[akther]

Hi

Sorry for the late response. If i put the URL from external location i am getting TMG screen and asking username and password. When i am giving username and password it's getting page cannot be displayed. ( will post exactly what error after credential giving)

[MichelZ · Accepted solution]

Seems to be a TMG issue:

Error Code: 500 Internal Server Error. The server denied the specified Uniform Resource Locator (URL). Contact the server administrator. (12202)

Can you make sure you followed those steps:

http://www.symantec.com/business/support/index?page=content&id=HOWTO59068

You should be able to see something in the TMG log as to why access was denied.

On the rule in TMG, there should be an option "Test Rule" (lower left hand of the Rule Properties), does this succeed?

Cheers
Michel