RE: VPN with Exchange issue

SKIP HOFMANN <[email protected]> Wed, 1 Dec 2004 17:21:59 -0800
Newsgroups gmane.comp.security.vpn
Message-ID <[email protected]>
Setup Exchange 2003 and have your clients run outlook 2003 on windows XP
sp1. Setup exchange for RPC over HTTPS and your issue is solved. No more
need to use a VPN



-----Original Message-----
From: Dube, Paul [mailto:[email protected]] 
Sent: Tuesday, November 30, 2004 5:14 PM
To: [email protected]
Subject: [VPN] VPN with Exchange issue

Greetings all,
I have a client that is presenting me with a new issue for which I do 
not yet have all the facts. I will be on site tomorrow and hope to at 
least get those. However, from what I have gathered so far, they are 
using Outlook and Exchange with a custom developed application using 
public folders. The data in the public folders must be available when 
not connected so it must use the 'available offline' aspect of that 
combination.
I am not completely familiar with Outlook/Exchange but I believe that 
this synchronization of content only transpires when using the native 
connect mode which is not commonly available without a VPN. My client is 
using the Shiva VPN client to connect to the LAN and access the Exchange 
server. The issue arises when they are in a hotel or other location with 
a LAN in the same subnet (192.169.1.255) and there is a machine on the 
LAN at the same IP address as the exchange server on the corporate LAN.
I am wondering if simply putting the Exchange server on an IP unlikely 
to be assigned to a machine on another LAN, using a reserved address and 
1-1 NAT, or routing the connection over an SSH redirect would be a 
workable solution. I am also wondering if the issue only arises due to 
an oversight in initial implementation and the Shiva VPN can be 
configured to route all requests on the specified ports over the VPN to 
a remote machine, ignoring any local machine with the same IP address.

Thank in advance,
Paul Dube
	
Paul Dube <[email protected]>