Exchange ActiveSync Setup

Exchange ActiveSync Setup

Network configuration

• Check to ensure port 443 is open on the firewall. (Note: If your company allows

Outlook Web Access, port 443 is most likely already open on your firewall.)

• On the Front-End Server, verify that a server certificate is installed and enable SSL for the Exchange ActiveSync virtual directory (require basic SSL authentication).

• On the Microsoft Internet Security and Acceleration (ISA) Server, verify that a server

certificate is installed and update the public DNS to properly resolve incoming

connections.

• On the ISA Server, create a Web listener as well as an Exchange Web client access

publishing rule according to Microsoft documentation. This is a necessary step in enabling Exchange ActiveSync.

• For all firewalls and network appliances, set the Idle Session Timeout to 30 minutes (check your Microsoft Exchange documentation for alternative heartbeat and timeout intervals).

Exchange account setup

Exchange ActiveSync features are enabled by default for all mobile devices at the

organizational level on Exchange Server 2003 and Exchange Server 2007.

• Enable Exchange ActiveSync for specific users/groups using the Active Directory

service. (For Exchange Server 2007, this is done in the Exchange Management Console under Recipient Configuration.)

• Configure mobile features, policies, and device security settings using the Exchange

System Manager. (For Exchange Server 2007, these features and settings are confi gured

in the Exchange Management Console.)

• If you are on Exchange Server 2003, download and install the Microsoft Exchange

ActiveSync Mobile Administration Web Tool, which is necessary for remote wipe.

(For Exchange Server 2007, remote wipe can be initiated from Outlook Web Access

or the Exchange Management Console.)