Forum Discussion

Adam_Miceli_144's avatar
Adam_Miceli_144
Icon for Nimbostratus rankNimbostratus
Oct 14, 2011

"403 - Forbidden: Access is denied." when accessing Exchange Control Panel (ECP)

I am running BIG IP VE 10.2.2, and have published Exchange 2010 using the Template Wizard. I can acces OWA fine, but when I try to view the ECP by going to Options > See All Options, I get the following error:

 

 

"403 - Forbidden: Access is denied. You do not have permission to view this directory or page using the credentials that you supplied."

 

 

I have tried enabling Windows authentication on my ECP vdir in IIS with no luck. Anyone have any idea why this is happening? I can access the ECP just fine when bypassing the VIP and pointing my browser directly to the CAS, or when using TMG.

 

 

Thanks,

 

Adam
microsoft
partner
  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Oct 14, 2011
    ECP should be setup for forms-based authentication, is it? Are you accessing the entire Exchange using TMG? There are lots of different caveats depending on your configuration/deployment.

     

  • Adam_Miceli_144's avatar
    Adam_Miceli_144
    Icon for Nimbostratus rankNimbostratus
    Oct 14, 2011
    Yes, both OWA and ECP are setup for FBA. I have a second web site with a second set of Exchange vdirs and authentication settings that I point my TMG server to. No traffic going through the F5 traverses TMG before or after.

     

     

    I also have another NLB from another manufacturer, and when I point DNS to its VIP, ECP works fine. It seems to be something with the BIG IP.
  • Adam_Miceli_144's avatar
    Adam_Miceli_144
    Icon for Nimbostratus rankNimbostratus
    Oct 14, 2011
    Nevermind, I found the problem.....the ECP IIS vdir was still set to require SSL :-)

     

     

    Thanks,

     

    Adam