publishingexchange2007owawithisaserver2006.docVIP

Publishing Exchange 2007 OWA with ISA Server 2006 On?Exchange Server site Start configuration on the?Exchange Server site. Start the Exchange Management Console (EMC), navigate to the Server configuration container, select the Client Access role and select the new OWA directory. The OWA directory is new in Exchange Server 2007 and will be used by OWA clients when they access Exchange Server 2007. You must enable Basic Authentication in the Authentication tab if it is not already configured. Figure 1: Enable Basic Authentication On?IIS site Next we must issue a certificate from an internal CA or a commercial CA for the Default Web Site. After issuing the certificate, navigate to the OWA directory – go to the Directory Security tab and enable SSL and 128-bit encryption as you can see in the following figure. Figure 2: Enable SSL and 128-Bit encryption On ISA site Before we start the Exchange Webclient Access Publishing rule wizard we must request a certificate for the ISA Server Web Listener because we are using HTTPS-Bridging. ISA Server terminates the SSL connection from the OWA client, inspects the traffic and encrypts the connection to the Exchange Server again. The common name (CN) of the requested certificate must match the Name of the Server that OWA clients specify in their browsers. In this example the Public FQDN is OWA.IT-TRAINING-GROTE.DE so the CN of the certificate must be OWA.IT-TRAINING-GROTE.DE. You can request certificates via the CA servers webconsole (http://caservername/certsrv). You must request a Webserver certificate as shown in the following figure. Please note:Depending on your ISA Server Firewall rules, you must create a Firewall rule that allows HTTP or HTPS access from your ISA Server to the CA Server. Figure 3: Advanced certificate request Split DNS or HOSTS file? The Public Name OWA.IT-TRAININGR-GROTE.DE in the OWA Web Listener must be resolvable to the internal Exchange Server IP adderss, so you have two options: Split-DNS or HO