Adding An Owa Web Server - Stormshield SN series Configuration Manual

Rewrite \"User-Agent\"
field (force OWA
compatibility mode)
Rewrite OWA Premium
mode specific code
Lotus Domino Web Access version 7.0.4 runs through SSL VPN tunnels. There is therefore no
need to enable specific rewriting rules that would allow supporting Lotus Domino web
applications.
Alternative URLs for this server (alias)
Server alias

Adding an OWA web server

The SSL VPN module on Stormshield Network Firewalls supports OWA (Outlook Web Access)
Exchange 2003, 2007 and 2010 servers.
"Premium" mode can only be used in Windows with Internet Explorer 5 and higher. It is based on
web technologies such as html, css and javascript but also on Microsoft proprietary technologies
such as htc, xml and activeX.
In Exchange 2003, the links are absolute links, regardless of whether they are in HTML pages,
javascripts, in XML data, or in XSL sheets, such as "http://www.company.com/index.htm".
It is therefore possible to add HTTP servers (with specific preset options for perfect compatibility
with OWA) to the list of web-access servers.
To add an HTTP server-OWA, the procedure is as follows:
Click on Add then select OWA Web server 2003 (Premium mode) or OWA Web server 2007 –
2010 (premium mode). The following screen appears:
Enter a name for this server. (The field can be left empty. Allowed characters: numbers, letters,
spaces, -, _, and dots.)
Page 337/448
The "User-Agent" field in the header of an HTTP request contains the identifier for the
web browser used. For example, on Internet Explorer: Mozilla/4.0 (compatible; MSIE
6.0 ...). Rewriting the "User-Agent" value therefore allows modifying the HTTP request in
such a way that it gives the impression of coming from a different browser type.
This option is particularly useful in basic mode of Outlook Web Access (OWA). In fact,
OWA in premium mode (a very advanced mode), uses Webdav, an extension of HTTP.
Since not all types of network equipment support these extensions (the SSL VPN
module on firewalls supports OWA in premium mode), the transmission of such traffic
may give rise to compatibility issues, especially on the internet. Instead of all users
(internal and external) having to use a more basic mode of OWA, the option Rewrite
User-Agent enables using "premium" OWA internally (compatibility with premium mode
is easy to obtain) and using "basic" mode by passing through SSL VPN (for mobile
users, via internet). Since "old" web browsers do not support these extensions, OWA
therefore automatically operates in basic mode when it encounters the "User-Agent"
on these browsers.
If this option has been selected, you will enable the specific rewriting rules that allow
supporting Outlook Web Access in premium mode.
Aliases allow indicating to the SSL VPN module that the server is known by several
names and/or IP addresses. If a mail server is defined as the object
"webmail.intranet.com" to which the alias "192.168.1.1" is assigned, the user will be
redirected to the mail server whether he visits the link "http://webmail.intranet.com" or
"http://192.168.1.1". Clicking on Add will display a line that will allow you to add a new
alias.
SNS - USER CONFIGURATION MANUAL V.3
sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SSL VPN PORTAL