to continue my series about publishing internal resources with ForeFront UAG, here is a post about publishing Exchange 2010 – more specifically publishing Exchange Autodiscover and Exchange Web Services.
This has been already covered by Microsoft through TechNet and a White Paper BUT details provided are not true or not complete.
Indeed, if you follow the steps detailed on the White Paper Autodiscover and EWS will not work correctly.
If you follow the steps, Autodiscover will generates an error or, for the best part, configure your email account with POP/SMTP (if enabled for the user).
In order to publish correctly Exchange services (in this case Outlook Anywhere), you have to set authentication providers for Autodiscover, EWS and OAB with ONLY Basic authentication:
and the following events are logged
Log Name: Application
Source: Microsoft Forefront UAG
Date: 10/11/2010 00:13:50
Event ID: 24
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: <UAG Server>
Description:
The request from user <FQDN AD domain>\<user UPN> at source IP address <IP address source> to trunk portal; Secure=1 failed because the request was unable to reply to an HTTP 401 request from application Outlook Anywhere – Autodiscover of type Autodiscover. The session ID is 135DDC52-8B8F-46B8-9AB4-DBB03CB69C50.
Log Name: Application
Source: Microsoft Forefront UAG
Date: 10/11/2010 09:18:31
Event ID: 24
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: <UAG Server>
Description:
The request from user <FQDN AD domain>\<user UPN> at source IP address <IP address source> to trunk portal; Secure=1 failed because the request was unable to reply to an HTTP 401 request from application Outlook Anywhere – EWS of type EWS. The session ID is 545633D9-8185-4424-9D93-6FF56B98C2FE.
This is really a mess as these details are not provided, and this was working fine with ForeFront TMG or ISA Server.