RPC over HTTP on PIX 6.3(5) and ASA 8.0 (3)

[a.ajiboye]

Hi,

A number of my clients have PIX 6.3(5) and ASA 8.0(3) installed on their networks. Some of them are planning to deploy RPC over HTTP in order to access Microsoft Outlook Web access.

What ports do I need to open on the PIXes and ASAs?

Regards.

[ggilbert]

Hi,

I did a google search and found the following statement

"The only ports you'll need to open on your firewall are TCP 80 and, if using SSL, TCP 443."

http://www.petri.co.il/configure_rpc_over_https_on_a_single_server.htm

If you know which port they are going to use, open that port through an ACL for access to the Microsoft Outlook Web access IP address.

Rate this post, if it helps.

Thanks

Gilbert

[Farrukh Haroon]

Disable HTTP, use only HTTPS. This means you have to open port no 443 only. However please note to be able to setup a profile, the user must be on the LOCAL LAN (because this requires RPC access). Once the profile is setup, the user can access his mailbox from anywhere he likes (There are some workarounds for this limitation also).

Regards

Farrukh