OWA 2007quirk

[DHayes_]

Our company is in the process of switching from Exchange 2003 to 2007. We currently use OWA 2003 through an active/passive cluster of SA6000 appliances and are not having any issues. I recently upgraded our test SA2000 appliance to 6.0R5 to support OWA 2007 and configured a resource profile. Everything works as far as accessing OWA but there is one anomaly that is bugging me. When a user opens an email from OWA and the email opens in a new window, the SSL login screen briefly appears and then the message appears. My concern is that someone on a slower link will see this and then try to enter their credentials again. Is anyone else experiencing this same issue? I currently have a case open with Juniper but they aren't sure why this is happening. If you use OWA Light the problem does not exist. It would be nice to hear that I'm not the only one having this issue.

[Brian_]

We've observed the same behavior. It turns out it is an IE7 workaround. It doesn't occur with IE6. I have an open case on it now, but heard from a Juniper engineer that this has been corrected in a later release--something I need to test.

[DHayes_]

I've had a case open with JTAC for a couple of weeks and I have not heard much back. Today they requested a complete policy trace when using OWA so I sent that to them. I figured this would require an OS patch to resolve. I'll post more when I hear back from JTAC.

[Brian_]

My case number is 2008-0320-0583, if you want to ask them to cross-reference. I uploaded an avi file showing the problem to that case.

[DHayes_]

Hey Brian, has Juniper resolved your case yet? I'm still working with them on my case but they haven't come up with a solution yet. If you've had any luck I'd be willing to try whatever you did to fix it.

Thanks!

[Brian_]

No resolution yet, but they said they were "looking into resolving the issue." They did suggest adding our IVE site URL to the browser's trusted site zone, but we do that here anyway. Wierd thing is with the behavior I've observed is that the outer frame of the OWA resource shows up trusted, but the email message body is in the "unknown zone." I've tried everything I can think of, including wildcards in the trusted sites config in the browser with no success in capturing what it is trying to do. HTTPWatch shows the redirect going on. I'm not the Exchange admin here, but did inquire with him and it seems the Exchange implementation is following all the standards.

[andrelo_]

Did you have any answer from Juniper's TAC for this case? We are migrating to OWA 2007 and we are having these problems.