Sbs 2011 ssl

[bits-n-bytes]

Using a SBS 2011 server with a watchguard firewall
SSL cert is valid and working on the Server, but cannot access it outside of the domain.
Watchguard uses a HTTPS NAT from any external to Server.

Everything looks good, https was working on old server prior to mailboxmove
after move and change of firewall settings cannot access.

Thanks so much for your time

 

[krtechsolutions]

What is the name on the cert?

For example "sbs.domain.com"

 

[bits-n-bytes]

webmail.costco.com

It somehow seems the old 2003 server is still in there somewhere redirecting

 

[YeOldeStonecat]

In the watchguard....is the object "Server" still set to the LAN IP of the old server? was this a migration and the old server is still sitting there running?

 

[bits-n-bytes]

no , all addresses associated with the old server have been changed ie: all port forwarders, and yes the old server is still up and yes this was a migration.

I have put a call into MS tech support for this, again thanks so much for the help.

 

[YeOldeStonecat]

Which certificate shows up if you browse to https://newservername/remote ?

If it's the new certificate...the port forwarding on the Watchguard is probably not correct.

If it's the old certificate (from the old server)...maybe the "move certificate" part of your migration was run after you already put in the new one..just gotta sort it out in IIS.

Check servers firewall too.

 

[bits-n-bytes]

On the phone with MS for 4 hours now, had to choose something for them to fix
so i choose activesync.

if i goto https://newserver/remote I get the Remote web access page internally

firewall policy is set for https from any-external to anyexternal-addressofnewserver

as for the cert, it is pointing to the webmail.server.com addy

 

[bits-n-bytes]

a reboot of the firewall opened up the ports still no mobile device access tho.

 

[YeOldeStonecat]

a reboot of the firewall opened up the ports still no mobile device access tho.

Did you re-do the smart phones? New server...new SSL cert...do 'em over, remove current profile, add new one.

 

[bits-n-bytes]

tried , with no joy, I suspect this watchguard is dying, I just spent ,, 3 days , and uhm, a sum of cash tracking a plugged up router
after I buy a new one, i'm gonna shoot this one with my 12 guage

I had my companyweb working and most everything is moved, after MS fiddled with it, thats all messed up.

 

[bits-n-bytes]

PS , but at least they have to fix the mobile device

Thanks again