OWA

[Guest tay]

What is the best way of using active-sync over GPRS. I have active-sync working with an Exchange 2003 server on the LAN but also want to connect in using a VPN.

I would prefer a more secure client than the windows IPSEC implimentation but would go with this if needs be. I have enabled the orange GPRS that is required to access IPSEC services.

Do I simply need to establish the VPN and let active sync do it stuff ? Has anyone else done this or have an alternative solution.

[Guest Paul [MVP]]

Why not use the Server Activesync to connect over GPRS using SSL in the same way OWA does, and cut out the hassle of VPN altogether?

P

[Guest tay]

Do I simply need to open up active sync ports on the firewall ? Then point the spv at the wan address of the server for its active sync ? Do you know what tcpip port active sync uses

I presume as I already connect the spv over the lan to the exchange server that end of it is all configured.

[Guest Paul [MVP]]

You don't even need to do that, it connects over the existing ports used for OWA (ie 80 for unencrypted or 443 for SSL).

Yeah, it should be, as long as the exchange server address is FQ and externally accessible.

P

[Guest tay]

OK cool.

I will give it a go. However to slightly complicate matters I have changed the SSL port on the exchange so that my OWA is picked up with :99999

Does that also make active sync change to that port ? If not is it possible to make the server active sync listen on a different port.

The reason for adding this extra level of complexity is due to the firewall intercepting SSL packets for itself. Therefore I forward the exchange SSL packets on a different port.

[Guest tay]

Also I must be missing something obvious but how do you make Active sync use the GPRS connection. If I open IE it picks up the GPRS but the active sync must just try the LAN connection as it errors instantly. I have looked in the active sync settings and can only see the information for my server. Nothing for what dial up to use.

[Guest Paul [MVP]]

Weird, it should automatically try and use the GPRS connection, as far as I know, there aren't any settings... :-|

Not sure if you can change the SSL port in use, you could try servername:99999 I suppose?

Strange setup ;-)

P