Help with Publishing Exchange 2007 using ISA 2006 Firewalls
We’ve had a number of questions on problem with publishing Exchange 2007 through the 2006 ISA Firewall. I haven’t had a chance to write about Exchange 2007 publishing through the ISA Firewall yet, as I don’t have a processor on my workstation (Pentium D 820) that supports Intel’s VT technology, which is required to run the 64-bit version of Exchange in a VMware virtual machine. I did try using the 32-bit version, but the SMTP “service” for Exchange 2007 said that there were insufficient resources and the “Hub” role wouldn’t work correctly. I’m chalking this up to problems with the 32-bit demo version of Exchange 2007. But until I move to a machine with a VT enabled processor, I’m not going to be much help in your Exchange 2007 publishing scenarios.
That isn’t to say there isn’t help! Microsoft wrote a great guide on publishing Exchange 2007 and you can find it at:
http://www.microsoft.com/technet/isa/2006/deployme...e.mspx
I suggest that you read this guide very closely. There are a number of changes in Exchange 2007, especially on the authentication front, that you need to be aware of in order to get your Exchange Web Publishing Rules to work correctly.
HTH,
Tom
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
Email: tshinder@isaserver.org
MVP — Microsoft Firewalls (ISA)
Marc Grote Says:
May 16th, 2007 at 12:54 pm
Hi Tom,
this Exchange feature is called “Backpressure”. You can use Exchange 2007 32 Bit in virtual machines but you must have sufficient resources (RAM, free hard disk space and more). You can customize / disable the Backpressure feature when you are editing the EdgeTransport.Exe.Config (yes also on the HT role)
You can read more about the Back pressure feature here:
http://technet.microsoft.com/en-us/library/bb201658.aspx
regards Marc (aka Jens Baier)
Ian Banyard Says:
May 17th, 2007 at 3:55 am
Hi Tom, while this document is good for publishing OWA/Exchange anywhere its not great for publishing SMTP services - Edge servers are brushed over, no mention of using TLS (and the additional verbs that need to be added to the filter…)
I’ve used a combination of your multiple networks guide (albeit a 2004 guide, most seems to apply for 2006), this guide for publishing the client access stuff and the Deploying a Standard Exchange Server 2007 Organization guide (500 page monster, but most of the useful information is from the deployment section…..)
Its interesting that the recent ISA2006 fix for E2K7 didnt also add the verbs and protocol objects the verbs in particular dont seem to be well documented..
Thomas Shinder Says:
May 18th, 2007 at 6:41 am
Hi Ian,
Thanks for the info on the Exchange 2007 Deployment Guide, I’ll have to check that out.
I agree that the SMTP verb and TLS information was mighty thin in the ISA doc.
Thanks!
Tom
Thomas Shinder Says:
May 23rd, 2007 at 8:51 am
Hi Marc,
Thanks! I think that’s what the problem was, as I saw a number of messages related to “backpressure” in the Event Viewer.
Do you think it will work if I turn off the backpressure feature in the XML file?
Thanks!
Tom
Marc Grote Says:
May 23rd, 2007 at 11:56 am
Hi Tom,
if you use Exchange 2007 only on test machines for your articles you should disable the backpressure feature. On production machine you should have enough capacity or you should modify the existing parameters.
regards Marc