I thought it would be helpful to put it out there that there is a known issue with the latest SA release (6.5r4) and OWA 2007. There is nothing in the release notes about this but there is a PR opened (527943) and we've been told a patch is expected in June. The behavior is users receive a 404 from OWA when trying to sent a message with a certain length. The 404 is coming from the CAS server but gets passed through the SA into the OWA GUI. We ended up rolling back and will make sure to test OWA from this point out in our lab. I have no idea if OWA 2003 is affected since we're only running 2007. ... View more

Has anyone created both a "standard" OWA and an "OWA light" link with SSO within the SA platform? We're running 6.3R3 and Exchange 2007. We have users who have "slow" internet connections and would like to use OWA light instead of the full blown OWA. I currently have an OWA link setup with SSO that is working well. I tried to create a seperate "OWA light" link using flags=1. It works but the profile seems to bleed-over into the standard OWA profile. My guess is it is due to the fact that both have the same backend URL. Any thoughts or advice is welcome! thanks, chris ... View more

We have successfully setup two-factor authentication with RSA and ldap (via AD). We have also successfully setup role mapping using AD groups and other attributes. At this point I would like to setup role mapping that includes whether or not a user has passed the "additional authentication server" auth. The "additional authentication server" is setup so that it will NOT end the session if auth fails. Currently ldap is our primary with RSA as our secondary. I'm trying to setup something like this: User logins with password only -> role 1 User logins with password + RSA + in proper AD group -> role 2 Has anyone done this? Any thoughts? I've done policy traces both with and without the 2nd authentication server and no usable attributes pop out at me. Thanks! ... View more

I have a mix of users who are reporting that when connected to a RDP bookmark, they are hitting the idle timeout and either being prompted with a message or kicked off completely. I've heard of 3 different versions: a) user prompted to continue session (from SA web interface) b) user is prompted but prompt is hidden behind RDP window (seems most common) c) user is disconnected completely after timeout I have seen "b" the most where there is a prompt but I do not see it until I close my RDP session and I am never disconnected. I have the idle timeout set to 15 minutes and the reminder time set to 5. Is this normal behavior? Does the IVE not pickup RDP activity in resetting the idle counter? Users are only using "Terminal Sessions" and cannot open NC sessions. Have people experience this same behavior? Any resolutions? Any insight would be much appreciated. thanks, chris ... View more

I've found the documentation for creating custom login pages and have had much luck creating a page I'm happy with.  I would like to continue that same formatting into my users "bookmarks" start page.  I'm most interested in bringing in the header.  I've been able to user the "logo" image but it just does not match the formatting I'm looking for.  Does anyone know how to create a template to override the bookmark header/banner? thanks! chris ... View more