Forum Discussion
Nov 27, 2023
Entra Application Proxy for Outlook Web App (OWA)
[Blog Post] I have put a new #article online. This time it's about the protection of Outlook Web App #OWA. In my article, I describe how we can protect OWA with #Entra Application Proxy for #onprem...
arturaragao
Apr 16, 2024Copper Contributor
We have a hybrid implementation and are experiencing issues that I can't properly understand.
If all requests are made by encapsulating OWA communication with the Application Proxy, why is the link address of the attachments pointing to a different link than the proxy?
I've already tried changing this link in the Exchange virtual directories, but OWA continues to point to mail.contoso.com, the attachment link. This means that this request is made outside the Entra Application Proxy and goes against the server that is not allowed in the Firewall.
We did a test to quickly release and test and after that we were able to download. But, it doesn't make sense to have the solution working like this, unless it doesn't really have support from the OWA publication. I only see this information for Hybrid Agent and we don't have this in our environment. Our environment is Hybrid only with CU12.
What is the official documentation that mentions that OWA and ECP resources do not support publishing properly?
If all requests are made by encapsulating OWA communication with the Application Proxy, why is the link address of the attachments pointing to a different link than the proxy?
I've already tried changing this link in the Exchange virtual directories, but OWA continues to point to mail.contoso.com, the attachment link. This means that this request is made outside the Entra Application Proxy and goes against the server that is not allowed in the Firewall.
We did a test to quickly release and test and after that we were able to download. But, it doesn't make sense to have the solution working like this, unless it doesn't really have support from the OWA publication. I only see this information for Hybrid Agent and we don't have this in our environment. Our environment is Hybrid only with CU12.
What is the official documentation that mentions that OWA and ECP resources do not support publishing properly?