Do you recognize a good idea when you see one? We want to hear from you!
Header Image

I suggest you ...

Web Application Security: Outlook Anywhere Support

We need an Outlook Anywhere connection over the Web Application Firewall to secure the Exchange 2010 Server. Currently it is not possible to forward the RPC Requests through the WAF. A NAT rule is not secure enough.

1,193 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    I agree to the terms of service
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Benjamin SchwitzerBenjamin Schwitzer shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →
    BitfireBitfire shared a merged idea: Microsoft Exchange EWS via WAF (Proxy)  ·   · 

    79 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      I agree to the terms of service
      Signed in as (Sign out)
      Submitting...
      • Stephan FietzekStephan Fietzek commented  ·   ·  Flag as inappropriate

        Please post your request in the official beta forum. The developers will have a look at it then.

      • Mirko GründlerMirko Gründler commented  ·   ·  Flag as inappropriate

        hi, in my outlook autodiscover does not work yet.
        the site-path routing to / rpc from the Exchange does not work.

        Here is the log:
        2013:04:22-19:57:53 mail reverse proxy: [Wed April 22 19:57:53.207455 2013] [proxy_msrpc: error] [pid 8230: tid 3786169200] (70007) The timeout specified has expired: [client ***. ***.33.133: 49286] RPC_OUT_DATA: failed to read request body - ap_get_brigade
        2013:04:22-19:57:53 mail reverse proxy: srcip = "***.***.33.133" localip = "109 205 205 207" size = "0" user = "-" host = "***.***.33.133" method = "RPC_OUT_DATA" statusCode = "400" reason = "-" extra = "-" time = "300 103 118" url = "/ rpc / rpcproxy.dll" server = "mail.xxxxxxx.com" referer = "-" cookie = "Outlook session = \" {C5E8EE57-4837-49E3-AF91-DF1C2321CCD1} = Outlook 14.0.6126.5000 OS = 6.1.7601 \ "" set-cookie = "-"

        Does anyone have an idea what is wrong?

        I have 9.092-8 build

        Thanks Mirko

      • StefanStefan commented  ·   ·  Flag as inappropriate

        does the 9.075-8 build also make RPC working for remote desktop Gateway?

      • Lorenz StegerLorenz Steger commented  ·   ·  Flag as inappropriate

        See Changelog for 9.1 Beta, Build 9.075-8:
        "Add Outlook Anywhere support to WAF"
        YEAH!!!! Finally!!! :-)

      • Anonymous commented  ·   ·  Flag as inappropriate

        With the pending death of TMG would this not be the highest priority? Plenty of people looking for a solution

      • Bernd ZipserBernd Zipser commented  ·   ·  Flag as inappropriate

        Several Customers would need this urgently.
        They wont setup an Exchange Frontend again, just to get this working...

        This has to be done very soon!!

      • DennisDennis commented  ·   ·  Flag as inappropriate

        RPC over https in MS products is also used for MS Remote Desktop Gateway. Can this feature request add support for MS RDGW as well?

      • andy schweizerandy schweizer commented  ·   ·  Flag as inappropriate

        Public Beta 9.1 is out, but no news about support for OutlookAnywhere in the description so far...

      • V. ZierV. Zier commented  ·   ·  Flag as inappropriate

        Hello,

        shouldn't UTM 9.1 come late 2012? When is it scheduled now?
        Reverse publishing is the last resort for TMG and ISA out there.
        WAF must support RPC over HTTPS urgent.

      • Stefan VaterStefan Vater commented  ·   ·  Flag as inappropriate

        Would bei a really huge feature - i think no other company has multi-tenant RPC over HTTP yet.

      • Christian KrüsiChristian Krüsi commented  ·   ·  Flag as inappropriate

        Hello. The last status update from a sophos team member is from June. Is there something new about the time this feature will be available? End of 2012 or begin of 2013 or far, far away in the future? Thanks in advance.

      • Christian KrüsiChristian Krüsi commented  ·   ·  Flag as inappropriate

        We are looking for a new firewall solution untill end of 2012. I was very impressed by the features of the sophos utm, specially the advantages of wireless management and protection built into the firewall. But if we can't secure publish rpc over https for Remote Desktop Gateway and Outlook Anywhere, we can't really use this product. It would really help if this feature was "planned" instead of "under review". Thanks.

      • Anonymous commented  ·   ·  Flag as inappropriate

        This is a very important feature! It is very simple: Nobody can afford not to support Exchange.

      • Mario LitteroMario Littero commented  ·   ·  Flag as inappropriate

        In my company we have just finished implementing exchange 2010, and after many attempts I was really surprised to read that WAF does not support Outlook Anywhere. It 's strange that microsoft mail client is not supported and it's a big constraint, difficult to explain.
        Outlook anywhere will be supported soon, or should I buy TMG?

      • Angelo ComazzettoAdminAngelo Comazzetto (Product Ninja, Sophos Features & Ideas Laboratory) commented  ·   ·  Flag as inappropriate

        Hi everyone,

        I am aware this feature is heavily needed. You might notice we recently added some of the other heavily-requested ones, and are developing as fast as we can. I tentatively would like to have this supported in UTM 9.1 later in 2012, and discussions about this are ongoing. The moment I can commit a version for on being able to work more seamlessly with OWA, I'll update this feature immediately. Stay tuned!

      ← Previous 1 3 4

      Feedback and Knowledge Base