PIX 506e Firewall, Exchanger server 2003 and mobile phone users

tharaka · ‎01-06-2009

Hi all,

I have been seeing the following warning message in application log of my exchange server 2003.

Event Type: Warning

Event Source: Server ActiveSync

Event Category: None

Event ID: 3033

Date: 1/6/2009

Time: 8:48:32 AM

User: Domain\username

Computer: Server Name

Description:

The average of the most recent [200] heartbeat intervals used by clients is less than or equal to [540]. Make sure that your firewall configuration is set to work correctly with Exchange ActiveSync and direct push technology. Specifically, make sure that your firewall is configured so that requests to Exchange ActiveSync do not expire before they have the opportunity to be processed. For more information about how to configure firewall settings when using Exchange ActiveSync, see Microsoft Knowledge Base article 905013, "Enterprise Firewall Configuration for Exchange ActiveSync Direct Push Technology"

Just wanted to know where in settings of PIX506e firewall needs to be changed.

Thanks,

tharaka

sachinraja · ‎01-06-2009

Hello Tharaka

what is your setup ? what exactly is said in article 905013 ? What do you want to accomplish here ?

Raj

tharaka · ‎01-06-2009

article 905013 doesn't say what changes need to be made to pix506e, but it asks to increase the http/https time-outs in your firewall.

Our PIX506E is opened for port 25/http/https for the mail server.

thanks!

sachinraja · ‎01-06-2009

hello tharaka

You can change the following timeouts on PIX:

timeout [xlate hh[:mm[:ss]]] [conn hh[:mm[:ss]]] [half-closed hh[:mm[:ss]]] [udp hh[:mm[:ss]]] [rpc hh[:mm[:ss]]] [h225 hh[:mm[:ss]]] [h323 hh[:mm[:ss]]] [mgcp hh[:mm[:ss]]] [sip hh[:mm[:ss]]] [sip_media hh[:mm[:ss]]][uauth hh[:mm[:ss]] [absolute | inactivity]]

You might be looking at the timeout conn (connection timeout), but make sure it affects all connections !! just not http and https .. i'll anyway go through the article and see..

Raj

tharaka · ‎01-08-2009

hi raj,

can you give me the instructions or a link that would show where this is done thru PDM.

thanks,

tharaka

Erin Korff · ‎02-11-2009

Were you ever provided any feedback on this issue?

tharaka · ‎02-11-2009

well, i still need instructions to fix this issue thru PDM.

thanks!

Erin Korff · ‎02-11-2009

I have a TAC case open for this currently. Once I have additional data I'll post what I can.

dhamilton123 · ‎04-27-2009

Any update here? I am also running into the same problem on my ASA 5505.

tharaka · ‎04-27-2009

nope...i am still having the issue. it keeps registering the event id 3033...