problem with ISA server 2000 on SBS 2003

Microsoft Windows

Hi All,

I have little problem with ISA server 2000 SP2 on SBS2003 SP1 (Exchange SP2,
W2K3 SP2 ). I have HW firewall in front of ISA server and ISA server have two
NIC. On HW firewall is configured that forward all HTTPS comunication to
"external" ( its internal network range beging 192.168.151.x ) ISA NIC. And
Internal NIC have 192.168.150.x IP range.

My problem is that "Server Publich rule" works that I can access OWA from
internet. But when I disable Server publishing rule and enable WEB publishing
rule I cant access the OWA.

OWA web publishing rule
************************
Destination: external DNS record and publisched path /Exchange/*, Exchweb/*,
/Exchadmin/*, /Public/*.

Redirect to internal web address: 192.168.150.xx
send original header ..... check marked
allow delegation .... check marked

Bridging: HTTP as HTTP, HTTPS as SSL
Require secure chanel ... check marked but not require 128 bit encryption.

user certificate ... not check marked.

What I am doing wrong?
Thanks for help.

Marek
With SBS SP1 you should be running ISA 2004
Yes I shoud, but we have older edition of SBS2003 where is only ISAserver
2000. And after 3 years the server was installed. This is not my fault.
I told to our purchasing that I need SP1 upgrade CD, but the dont care and
now I am in this position.

Do you have some idea?
Hello Marek,

Thank you for posting here. Let's also thank Russ for the input.

According to your description, I understand that you want to publish your
OWA thru ISA server 2000 on your SBS 2003 sp1. If I have misunderstood the
problem, please don't hesitate to let me know.

Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

1. We do not need to create any manually rule to publish OWA in SBS 2003.
We only need to run the CEICW to publish the OWA. The CEICW will create
publish run automatically for you.

Go through the follow KB and rerun CEICW carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763

Detailed steps for your reference:

a. On the SBS 2003 Server open the Server Management console. Go to
Standard Management\To Do List.

b. Click the "Connect to the Internet" link.

c. When navigating to the Firewall page, select "Enable firewall" and click
Next.

d. On the "Services Configuration" page, select all the items and then
click Next.

e. On the "Web Services Configuration" page, make sure "Allow access to the
entire Web site from the Internet" is selected. If you select "Allow access
to only the following Web site services from the Internet", make sure all
items in the list are selected. Click Next.

f. On the "Web Server Certificate" page, choose to create a new Web server
certificate and then type the public domain name (your public DNS name)
that you will use to access OWA and RWW (for example, if your public domain
name that you use to access the sites is www.xyz.com, you should type
www.xyz.com as the new certificate name).

g. Go through the remaining steps.

2. To upgrade your ISA server 2000 to ISA server 2004, you need to get the
SBS 2003 sp1 upgrade disk for premium, or the SBS 2003 R2 upgrade disk for
premium. They are all not free. You need to pay for them.

However, SBS 2003 sp1 upgrade disk for premium is not available now, you
need to upgrade your SBS 2003 sp1 premium to SBS 2003 R2 premium.

How to Upgrade to Windows Small Business Server 2003 R2
http://www.microsoft.com/windowsserver2003/sbs/upgrade/default.mspx

Pricing for Windows Small Business Server 2003 R2
http://www.microsoft.com/windowsserver2003/sbs/howtobuy/pricing.mspx

I hope these steps will give you some help.

Thanks and have a nice day!

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
Hi,

I have try it but I have this notice:
10061 - Connection refused
Internet Security and Acceleration Server

R,
M
Hi Marek,

Thank you for your update.

Based on my research, this problem occurs if Microsoft Internet Security
and Acceleration (ISA) Server 2000 is installed in Cache mode. If ISA
Server 2000 is installed in Cache mode, the Configure E-mail and Internet
Connection Wizard does not configure Web publishing. Additionally, ISA
Server 2000 does not support the Microsoft Firewall service when ISA Server
2000 runs in Cache mode.

To determine whether ISA Server 2000 is running in Cache mode, follow these
steps:

1. Click Start, point to All Programs, point to Microsoft ISA Server, and
then click ISA Management.
2. Expand Servers and Arrays, right-click your Windows Small Business
Server-based computer, and then click Properties.
3. On the General tab, if Cache appears in the Mode box, ISA Server is
running in Cache mode.

RESOLUTION
To resolve this problem, follow these steps:

1. Remove ISA Server 2000. To do this, use one of the following methods:
a. Use Add or Remove Programs in Control Panel.
b. Run the Rmisa.exe program. This program is located in the
ISA2000\ISA\I386 folder on the Windows Small Business Server 2003, Premium
Edition CD.

2. Reinstall ISA Server 2000 in Integrated mode. For additional
information about how to install ISA Server 2000, see the
Premiuminstallsteps.htm file in the root directory of the Windows Small
Business Server 2003, Premium Edition CD.

I hope these steps will give you some help.

Thanks and have a nice day!

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
your
the
can
2003.
click
the
access
all
server
domain
the
for
corresponding
manner.
the
are
newsreader,
doing
Please
rights.
ISAserver
and
server
comunication
OWA
Hi Terence,

Now It works. I had to run ICW again, it made everything and voala
everething was suddenly working.

Anyway thanks a lot for help. If something will happen sure I will write to
this post again.


R,
Marek

PS: Next step will be upgrade ISA server 2000 SP2 to ISA server 2004.
Hi Marek,

Thank you for your update.

I'm glad the issue was resolved after you ran the CEICW again. I hope
everything is going well.

If there's anything else about this issue I can do for you, or the issue
reoccurs, please do not hesitate to let me know.

Thank you and have a nice day,

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
to
Internet
Server
these
and
methods:
Premium
corresponding
manner.
the
are
newsreader,
doing
Please
rights.
misunderstood
we
create
then
to
name)
get
disk
you
issues
check
your
we
microsoft.public.windows.server.sbs:120568
fault.
care
ISA
WEB
Hi Terence,

Hm my ISA is running in "Integrated mode" I checked it.

Any ideas ?

Thanks Terence
RUSS, Liu.

thanks I will try it but give me a 3 days.

Marek
Email me Marek
russ AT sbits.biz

Russ