Hi,
We're currently deploying Lync 2010 in our organization. We have a hybrid environment (on-premises Exchange and DC), with Lync through Office365. We've setup 2 ADFS servers on-premises.
The problem we're experiencing: Logging on externally. When you have a client within the network, there's no problem to sign in. When signing on remotely, it doesn't work.
Here's the twist: If I logon on the network (which works), logout, change network to an external one and then try to login again - it works! It's as if the client caches some data that's needed to login, I'm not sure. If I reboot the computer and try externally
again, it doesn't work.
We're using a Forefront TMG as firewall. Thought I'd post snippets from the logs to let you know what I'm seeing.
Any help would be greatly appreciated!
Regards,
Fred
| Client IP | Client Username | Client Agent | Authenticated Client | Service | Server Name | Referring Server | Destination Host Name | Destination IP | Protocol | Transport | HTTP Method | URL | Rule | Filter Information | MIME Type | Object Source | Log Time | Cache Information | Error Information | Destination Port | Source Port | Log Record Type | Session Type | Source Network | Destination Network | Action |
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc22f; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:08 PM | 0x44000000 | 0xe00 | 443 | 38594 | Web Proxy Filter | Web Proxy | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | Firewall-Server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | - | 8/7/2013 3:01:09 PM | 0x0 | 0x0 | 443 | 38594 | Firewall | External | Local Host | Initiated Connection | ||||||||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc231; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:11 PM | 0x44000008 | 0x580 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | |||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc259; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020008 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc25e; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | GET | http://autodiscover.mydomain.com/autodiscover/autodiscover.xml | Exchange 2010 - Outlook Anywhere | Req ID: 132bc25d; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/html | Internet | 8/7/2013 3:01:11 PM | 0x44020000 | 0xc00 | 443 | 45323 | Web Proxy Filter | Web Proxy | External | Local Host | Allowed Connection | |
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc25f; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://autodiscover.mydomain.com/autodiscover/autodiscover.svc | Exchange 2010 - Outlook Anywhere | Req ID: 132bc260; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:11 PM | 0x44020000 | 0x780 | 443 | 45323 | Web Proxy Filter | External | Local Host | Allowed Connection | |||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://autodiscover.mydomain.com/autodiscover/autodiscover.svc | Exchange 2010 - Outlook Anywhere | Req ID: 132bc263; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/html | Internet | 8/7/2013 3:01:11 PM | 0x44000008 | 0x580 | 443 | 45323 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://autodiscover.mydomain.com/autodiscover/autodiscover.svc | Exchange 2010 - Outlook Anywhere | Req ID: 132bc264; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020008 | 0x780 | 443 | 45323 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc266; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc26a; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:11 PM | 0x44000008 | 0xc00 | 443 | 38640 | Web Proxy Filter | Web Proxy | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc269; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | Firewall-Server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | - | 8/7/2013 3:01:11 PM | 0x0 | 0x0 | 443 | 45323 | Firewall | External | Local Host | Initiated Connection | ||||||||
| xxx.xxx.xxx.xxx | Firewall-Server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | - | 8/7/2013 3:01:11 PM | 0x0 | 0x0 | 443 | 38640 | Firewall | External | Local Host | Initiated Connection | ||||||||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc26b; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020008 | 0x780 | 443 | 38640 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc26f; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc270; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38640 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc274; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc276; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc275; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:14 PM | 0x60020000 | 0x780 | 443 | 38640 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc277; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:16 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
1. When trying to logon externally (fails):
| Client IP | Client Username | Authenticated Client | Service | Server Name | Referring Server | Destination Host Name | Destination IP | Protocol | Transport | HTTP Method | URL | Rule | Filter Information | Object Source | Log Time | Cache Information | Error Information | Destination Port | Source Port | Log Record Type | Session Type | Source Network | Destination Network | Action |
| xxx.xxx.xxx.xxx | Firewall-server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | 8/7/2013 2:28:48 PM | 0x0 | 0x0 | 443 | 38801 | Firewall | External | Local Host | Closed Connection | |||||||
| xxx.xxx.xxx.xxx | Firewall-server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | 8/7/2013 2:28:48 PM | 0x0 | 0x0 | 443 | 38824 | Firewall | External | Local Host | Closed Connection | |||||||
| xxx.xxx.xxx.xxx | Firewall-server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | 8/7/2013 2:28:48 PM | 0x0 | 0x0 | 443 | 38916 | Firewall | External | Local Host | Closed Connection | |||||||
| xxx.xxx.xxx.xxx | Firewall-server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | 8/7/2013 2:28:48 PM | 0x0 | 0x0 | 443 | 38847 | Firewall | External | Local Host | Closed Connection | |||||||
| xxx.xxx.xxx.xxx | Firewall-server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | 8/7/2013 2:28:48 PM | 0x0 | 0x0 | 443 | 38893 | Firewall | External | Local Host | Closed Connection | |||||||
| xxx.xxx.xxx.xxx | Firewall-server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | 8/7/2013 2:28:56 PM | 0x0 | 0x0 | 443 | 56187 | Firewall | External | Local Host | Initiated Connection | |||||||
| xxx.xxx.xxx.xxx | anonymous | Yes | Reverse Proxy | Firewall-server | sts.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://sts.mydomain.com/adfs/services/trust/2005/usernamemixed | Allow Federation Proxy | Req ID: 132b59af; Compression: client=No, server=No, compress rate=0% decompress rate=0% | Internet | 8/7/2013 2:28:59 PM | 0x60000000 | 0x600 | 443 | 56187 | Web Proxy Filter | Web Proxy | External | Local Host | Allowed Connection |
When trying to logon externally after a successful internal login (works):
| Client IP | Client Username | Client Agent | Authenticated Client | Service | Server Name | Referring Server | Destination Host Name | Destination IP | Protocol | Transport | HTTP Method | URL | Rule | Filter Information | MIME Type | Object Source | Log Time | Cache Information | Error Information | Destination Port | Source Port | Log Record Type | Session Type | Source Network | Destination Network | Action |
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc22f; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:08 PM | 0x44000000 | 0xe00 | 443 | 38594 | Web Proxy Filter | Web Proxy | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | Firewall-Server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | - | 8/7/2013 3:01:09 PM | 0x0 | 0x0 | 443 | 38594 | Firewall | External | Local Host | Initiated Connection | ||||||||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc231; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:11 PM | 0x44000008 | 0x580 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | |||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc259; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020008 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc25e; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | GET | http://autodiscover.mydomain.com/autodiscover/autodiscover.xml | Exchange 2010 - Outlook Anywhere | Req ID: 132bc25d; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/html | Internet | 8/7/2013 3:01:11 PM | 0x44020000 | 0xc00 | 443 | 45323 | Web Proxy Filter | Web Proxy | External | Local Host | Allowed Connection | |
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc25f; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://autodiscover.mydomain.com/autodiscover/autodiscover.svc | Exchange 2010 - Outlook Anywhere | Req ID: 132bc260; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:11 PM | 0x44020000 | 0x780 | 443 | 45323 | Web Proxy Filter | External | Local Host | Allowed Connection | |||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://autodiscover.mydomain.com/autodiscover/autodiscover.svc | Exchange 2010 - Outlook Anywhere | Req ID: 132bc263; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/html | Internet | 8/7/2013 3:01:11 PM | 0x44000008 | 0x580 | 443 | 45323 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | autodiscover.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://autodiscover.mydomain.com/autodiscover/autodiscover.svc | Exchange 2010 - Outlook Anywhere | Req ID: 132bc264; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020008 | 0x780 | 443 | 45323 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc266; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc26a; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | Internet | 8/7/2013 3:01:11 PM | 0x44000008 | 0xc00 | 443 | 38640 | Web Proxy Filter | Web Proxy | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc269; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | Firewall-Server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | - | 8/7/2013 3:01:11 PM | 0x0 | 0x0 | 443 | 45323 | Firewall | External | Local Host | Initiated Connection | ||||||||
| xxx.xxx.xxx.xxx | Firewall-Server | - | 212.xxx.xxx.xxx | Lync Online | TCP | - | - | - | - | 8/7/2013 3:01:11 PM | 0x0 | 0x0 | 443 | 38640 | Firewall | External | Local Host | Initiated Connection | ||||||||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc26b; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:11 PM | 0x60020008 | 0x780 | 443 | 38640 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc26f; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc270; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38640 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc274; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc276; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:12 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc275; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:14 PM | 0x60020000 | 0x780 | 443 | 38640 | Web Proxy Filter | External | Local Host | Allowed Connection | ||
| xxx.xxx.xxx.xxx | anonymous | OC/4.0.7577.4356 (Microsoft Lync 2010) | Yes | Reverse Proxy | Firewall-Server | webmail.mydomain.com | 172.xxx.xxx.xxx | https | TCP | POST | http://webmail.mydomain.com/ews/exchange.asmx | Exchange 2010 - Outlook Anywhere | Req ID: 132bc277; Compression: client=No, server=No, compress rate=0% decompress rate=0% ; FBA cookie: exists=no, valid=no, updated=no, logged off=no, client type=unknown, user activity=yes | text/xml; charset=utf-8 | Internet | 8/7/2013 3:01:16 PM | 0x60020000 | 0x780 | 443 | 38594 | Web Proxy Filter | External | Local Host | Allowed Connection | ||