OWA Archive Explorer 403 Forbidden error

[EVHolic]

All -

My environment - Exchange 2007 - windows 2008 SP2 - EV 8.03.

We have configured OWA for our users. OWA works correctly internally but does not work externally as the archive explorer and archive search both come back with a "403 forbidden - URL error". You can see its going to the "EVserver.company.com/enterprisevault/Userid...." just as it does internally but obviously since its a request from the outside of the company, it results in an error.

Both internally and externally we access the OWA site via : http:.//webmail.companyname.com/owa

We have tried multiple things to no avail - can someone help on where I need to modify configuration?

[GertjanA]

Hello EVHolic,

I assume you used doc http://seer.entsupport.symantec.com/docs/321591.htm

I assume you also followed http://seer.entsupport.symantec.com/docs/305637.htm

Check those, especially the 2nd one.

EDIT - Setting up Exchange Server Archiving.pdf, chapter 13

[ALGM]

For OWA Extensions work externally there is a couple of things that need to be in-place.

First of all verify OWA Servers access Internally (LAN) the EVSERVER using port 80 (telnet evserver 80) I belive this is working because you mention is working fine using LAN.
I belive you also run the owauser script with no errors and by refering to the installation guide, correct?
If you use ISA Server as Firewall for your organization there is a couple of docs that address you for the configuration needed; refer to the post of Gertjan made you before. You have to publish the evserver usign the same listener that is using your OWA rule but with por 80. I'm my case I have to create another Web Server Publishing Rule for the EVSERVER.
The Desktop Policy in use must configured as Proxy and not Direct on client access method and on RPC over HTTP address I use the default <https>/enterprisevault/ when the firewall is not an ISA Server. If the Firewall is an ISA Server use your external OWA address without /owa but with /enterprisevault/ (https://mail.corp.com/enterprisevault/)
For any change made on the Desktop Policy you must sync mailboxes again and make sure you select the last checkmark, sorry but I cannot remmeber the exact name now but it have something about security in the name just select all of them and click run by selecting archive and shortcut processing also on the drop down menu.

Good luck!

[Arjun_Shelke]

You will need to modify the web.config file on CAS server to use external web app url.

http://support.veritas.com/docs/304386 - Enterprise Vault 2007 and 8.0 Web.config options for Microsoft Exchange 2007 Outlook Web Access (OWA)

[RahulG]

Incase if you are using ISA 2006 Check the Web Puliching Rule from ISA whether /EnterpriseVaultProxy/* has configured in Paths, if not, add it and apply the rule.
Have look of the following document as well http://support.veritas.com/docs/308356