Microsoft KB Archive/259240

= How to configure OWA to connect to Exchange through a firewall =

Article ID: 259240

Article Last Modified on 10/28/2006

-

APPLIES TO


 * Microsoft Outlook Web Access 5.5
 * Microsoft Exchange Server 5.5 Standard Edition

-



This article was previously published under Q259240



Important This article contains information about how to modify the registry. Make sure to back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



SUMMARY
This article describes how to set up Microsoft Outlook Web Access (OWA) to connect to Microsoft Exchange Server through a firewall. This configuration assumes that there is a firewall between OWA and the Exchange Server computer. There are three ports that need to be opened on the firewall in this configuration. On the Exchange Server computer, two ports need to be statically mapped. To do this, the ports must be opened by editing the registry.

Note The third port, port 135, must be opened on the firewall.



MORE INFORMATION
Follow the steps in this section to statically map the two ports on the Exchange Server computer. The Exchange Server computer that OWA points to must have these ports mapped.

Note One port must be mapped for the information store, and one port must be mapped for the directory.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

 Start Registry Editor (Regedt32.exe). Locate the following key in the registry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeDS\Parameters

 Add the following entry for the Microsoft Exchange Directory service:

Entry: TCP/IP port

Type: REG_DWORD

Data:

Note We recommend that you assign ports from the 5000 to 65535 (decimal) range.

For example:

&quot;TCP/IP Port&quot;=dword:00001388(5000)

 Locate the following key in the registry:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeIS\ParametersSystem

 Add the following entry for the Exchange Server information store:

Entry: TCP/IP port

Type: REG_DWORD

Data:

Note We recommend that you assign ports from the 5000 to 65535 (decimal) range.

For example:

&quot;TCP/IP Port&quot;=dword:00001389(5001)

 Quit Registry Editor.</li> Restart your computer for the changes to take effect.</li> On the firewall, open the ports that you assigned to the directory, the information store, and port 135 for the endpoint mapper.

Note For the Exchange Server to communicate back through the firewall to the OWA server it is also necessary to have the ephemeral ports 1024 through 65535 configured for outbound communications from the Exchange server to the OWA server. Although you can specify what ports Exchange listens on for RPC traffic, you can not specify what RPC ports the OWA application uses for RPC communications.</li></ol>

Note The OWA server must also be a member of the domain where the mailboxes reside. For additional information about how to configure that access, click the following article number to view the article in the Microsoft Knowledge Base:

179442 How to configure a firewall for domains and trusts

Additional query words: XMRP XWEB

Keywords: kbhowto KB259240

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.