owa via asa

[clougher01]

Howdy,

I'd like to remove an ISA server from the DMZ of an ASA 5510 and just use the ASA to terminate the OWA traffic.. The users that will be using the OWA will be mobile windows clients. We currently use LDAP Auth so would like to use that.

Can this be done? If so is there any doco for this?

Thanks,

T.

[Allen P Chen]

Hello,

OWA is a feature on the Exchange server, so I do not believe it is possible for the ASA to terminate the OWA traffic.  However, you can configure NAT and open up the needed ports on the ASA to allow traffic from the outside to reach your Exchange server via OWA.

[Allen P Chen]

You can configure clientless SSL VPN so that the ASA proxys the connection for OWA to the Exchange server.  Maybe this is more what you had in mind.

Here is a configuration example:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00806ea271.shtml

[clougher01]

Thanks.. Can this be done from windows mobile devices though?

[Allen P Chen]

Here are the supported OS and browsers for Clientless SSL VPN:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/webvpn.html#wp1345239

It looks like Windows Mobile OS is not officially supported, but you can give it a try and see if it will work.  Good luck!