outlook access using vpn

[vkarthik]

We have a vpn setup where vpn clients need to access MS-Exchange using MS-Outlook as if they are in LAN. We have configured the vpn zone using "nat 0". We wanted domain authentication, MS-Outlook access. We have three networks connected to the PIX 515 Firewall. 1- VPN Zone, 2-DMZ, 3-Outside(Internet). VPN Clients need to connect to MS-Exchange which is localted in vpn zone. What configurations need to enabled for the same like( access-list, established,..etc). What are all the ports need to be opened.

Thanks in Advance,

Karthikeyan V

[afakhan]

Hi,

when your traffic is encrypted its IPSec (ESP traffic), so you wont need to open up any specific ports on the outside interface, though make sure that you have sysopt for ipsec.

if you want to granulize access, use an access list on the inbound interface to do that.

thx

Afaq

[vkarthik]

We can able to access smtp, telnet services in VPN Zone with the specified "access-list 80 permit ip " access-list enabled in "nat (inside) 0 access-list 80". At the same time we couldn't access MS Outlook with the same access-list and nat commands. MS Outlook uses "MAPI" for accessing MS Exchange server. Whether PIX Firewall have Microsoft "MAPI" support is enabled or not?