防火墙只需要开放CAS的443端口,其他硬件防火墙也是如此,不需要开放其他额外端口(80也没有必要开通,如果都使用https的话)
选择Exchange模式:填写Exchange服务器计算机FQDN(CAS计算机名称:excas.),用户电子邮件地址(exuser01@) 其他设置--连接:使用Outlook Anywhere 现在检查姓名如果提示Exchange服务器不可用,则忽略错误,直接点击下一步,配置完成后打开Outlook即可成功连接到Exchange服务器 Outlook在启动的时候如果提示证书错误,直接退出的话,则导入根证书即可。
注:此处不能填写CAS的外部域名,否则会一直提示输入用户名密码,用户身份验证无法通过。 autodiscover.的A记录也需要发布到公网
Outlook Anywhere下载OAB的问题: OAB的下载时通过autodiscover实现的,所以可以使用Outlook的自动配置测试功能进行测试是否可以成功解析出OAB的URL地址 然后在Outlook上测试autodiscover,测试结果中要出现 https://mailpp./OAB/......,之后才会下载成功(OAB的内部或外部URL地址都会被解析出来)
在CAS上配置OAB的外部URL: https://mailpp./OAB,使其生效需要重启(Ex File Distribution或者Ex RPC Client Access服务)
注意: The fact that you are testing or lookinng at port 135 with "netstat -n", is not an indication that something is wrong. That simply implies outlook is trying to look UUID on the server for specific service . Point is , 135 is not an indication that something is wrong ( By design if outlook client is in same network it will always connect on port 135 first for service specific UUID ) what apparently is wrong is that your Outlook Anywhere isn't configured properly, or Outlook itself isn't configured properly. Outlook Anywhere在线测试:https://
Autodiscover原理: http://www.cnblogs.com/maple/archive/2007/04/02/697491.html |
|