Skip to main content
scott_manley
New Member
December 7, 2016
Question

Access to external OWA

  • December 7, 2016
  • 7 replies
  • 10655 views

Hello,

 

I need some help, I have a client on my network and their email server is a Outlook Web App exchange server, and I can't access the URL from my network. 

 

Thanks in advance. 

    7 replies

    tanr
    New Member
    December 7, 2016

    You don't give much information to go on.

     

    Are you doing deep SSL inspection?  I believe Outlook on Windows and Mac (and I think Outlook Web App) do certificate pinning when talking to Exchange servers, so they will fail if you are doing deep SSL inspection.  In one case I worked on (Outlook on Mac OSX) there was no good feedback to the user about what the problem was -- all I could find with debug logging turned on for Outlook was a bunch of SOAP errors.

     

    If that's the case, you should be able to set up an SSL Inspection profile with an exception just for the URL they need to access (and preferably only the specific mail protocols).

     

     

    Beyond that possibility, we probably need more details to give suggestions.  

    FortiGate models and FortiOS version, logs and errors, etc.

    scott_manley
    New Member
    December 7, 2016

    Hi tanr,

    Thanks for your reply. No I'm not using deep inspection. They were using a laptop hardlined into out LAN, and also tried on Wifi on their cell phone, which is outside the lan. Both failed to load the web page url. Is there a walk through for the SSL inspection profile setup for this? Im using a fortigte 100d, firmware v5.2.0. in NAT mode. 

     

    SCSIraidGURU
    New Member
    December 8, 2016

    What does the logs show failed when the user tries to connect to the OWA?   You can search the log for the OWA server IP. 

    scott_manley
    New Member
    December 8, 2016

    Hello,

     

    I was getting a timeout error, attached is the log info.

    SCSIraidGURU
    New Member
    December 8, 2016

    Have you considered setting up a IPv4 policy from that user to the OWA server IP address with security profiles disabled? 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!